Thimpress Learnpress Wordpress Lms Plugin vulnerabilities

3 known vulnerabilities affecting thimpress/learnpress_wordpress_lms_plugin.

Total CVEs

3

CISA KEV

0

Public exploits

2

Exploited in wild

0

Severity breakdown

CRITICAL2HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-45808CRITICALCVSS 9.8PoC≥ n/a, ≤ 4.1.7.3.22023-01-26

CVE-2022-45808 [CRITICAL] CWE-89 CVE-2022-45808: SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

CVE-2022-47615CRITICALCVSS 9.8PoC≥ n/a, ≤ 4.1.7.3.22023-01-26

CVE-2022-47615 [CRITICAL] CWE-434 CVE-2022-47615: Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

CVE-2022-45820HIGHCVSS 8.8≥ n/a, ≤ 4.1.7.3.22023-01-26

CVE-2022-45820 [HIGH] CWE-89 CVE-2022-45820: SQL Injection (SQLi) vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. SQL Injection (SQLi) vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.