CVE-2020-6010 - LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection

HIGH

LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection

Published Apr 30, 2020

8.8

HIGH

CVSS 3.1

EPSS 49.23%

LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

LearnPress Wordpress Plugin

n/a

Version	Status	Constraints
<= 3.2.6.7	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://packetstormsecurity.com/files/163536/WordPress-LearnPress-SQL-Injection.html		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27164		Advisory
https://plugins.trac.wordpress.org/browser/learnpress/trunk/readme.txt?rev=2288975		x_refsource_MISCRelease Notes
https://research.checkpoint.com/2020/e-learning-platforms-getting-schooled-multiple-vulnerabilities-in-wordpress-most-popular-learning-management-system-plugins/		x_refsource_MISCExploitThird Party Advisory
https://wordpress.org/plugins/learnpress/#developers		x_refsource_MISCRelease Notes