LearnPress – WordPress LMS Plugin, bb7852c55c53c6539cb44ef363dff8a769bc8180
- CVE, Research URL
- Application
- Published on
- Jul 06, 2023
- Research Description
- LearnPress – WordPress LMS Plugin for Create and Sell Online Courses [learnpress] < 4.2.3.1 LearnPress <= 4.2.3 - Missing Authorization The LearnPress plugin for WordPress is vulnerable to unauthorized access of user data due to a missing capability check on the search_users function in versions up to, and including, 4.2.3. This makes it possible for subscribers to enumerate users.
- Affected versions
-
max 4.2.3.1.
- Status
-
vulnerable