Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2020-6010 — SQL Injection in Learnpress

Severity

8.8HIGHNVD

EPSS

45.5%

top 2.38%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Timeline

PublishedApr 30

Latest updateMay 24

Description

LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

GHSA

GHSA-q92c-ww48-wpfq: LearnPress Wordpress plugin version prior and including 3↗2022-05-24

▶

CVEList

CVE-2020-6010: LearnPress Wordpress plugin version prior and including 3↗2020-04-30

▶

Exploit-DB

WordPress Plugin LearnPress 3.2.6.7 - 'current_items' SQL Injection (Authenticated)↗2021-07-19

▶

Bugzilla

CVE-2020-11042 freerdp: out-of-bounds read in update_read_icon_info function↗2020-05-13

▶