cleantalk
Vulnerabilities and Security Researches

LearnPress – WordPress LMS Plugin, CVE-2020-11510

CVE, Research URL

CVE-2020-11510

Published on
-
Research Description
Versions below 3.2.6.9 allow an attacker to publish or trash any existing post or page, or even set it to a nonexistent status, at which point it would no longer appear on the site or be accessible from wp-admin, and could only be recovered by modifying its status in the database.
Affected versions
Min -, max 3.2.6.8.
Status
vulnerable