CVE-2024-6099

CWE-420CWE-416 — Use After FreeCWE-284 — Improper Access ControlCWE-122 — Heap-based Buffer OverflowCWE-357CWE-347CWE-94215 documents4 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 74.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Thimpress LearnpressThimpress Learnpress – Wordpress LMS Plugin FOR Create AND Sell Online Courses
Timeline
PublishedJul 2

Description

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthenticated bypass to user registration in versions up to, and including, 4.2.6.8.1. This is due to missing checks in the 'check_validate_fields' function in the checkout. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDthimpress/learnpress< 4.2.6.8.2

Patches

Patch: plugins.trac.wordpress.org ↗Patch: plugins.trac.wordpress.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-cwx6-fw99-mwh9: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthenticated bypass to user registration in versions up to, and includi↗2024-07-02
▶
CVEList
LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration↗2024-07-02
▶

📋Vendor Advisories

10
Microsoft
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability↗2024-02-13
▶
Microsoft
Chromium: CVE-2024-1060 Use after free in Canvas↗2024-02-13
▶
Microsoft
Chromium: CVE-2024-1059 Use after free in WebRTC↗2024-02-13
▶
Microsoft
Chromium: CVE-2024-1077 Use after free in Network↗2024-02-13
▶
Microsoft
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability↗2024-01-09
▶
CVE-2024-6099 (MEDIUM CVSS 5.3) | The LearnPress – WordPress LMS Plug | cvebase.io