by Kastro
Paper/Archive/CVE-2023-6634

CVE-2023-6634

thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses — LearnPress <= 4.2.5.7 - Command Injection

EPSS 9%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 95.1.951 × 2019.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function. This is due to the plugin making use of the call_user_func function with user input. This makes it possible for unauthenticated attackers to execute any public function with one parameter, which could result in remote code execution.

Affected

ProductAffectedFixed inSource
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses≤ 4.2.5.7–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Wordfence (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/21291ed7-cdc0-4698-9ec4-8417160845ed?source=cverefplugins.trac.wordpress.org/changeset/3013957/learnpress