Learnpress Wordpress Lms Plugin (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-10-31. Vendor: Unknown.

CVEs of Learnpress Wordpress Lms Plugin

• CVE-2022-3360 - CVSS 8.1 (high), 2022-10-31: The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP…
• CVE-2022-0271 - CVSS 6.1 (medium), 2022-04-11: The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email…
• CVE-2021-24951 - CVSS 9.8 (critical), 2021-12-13: The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating…
• CVE-2021-24702 - CVSS 4.8 (medium), 2021-10-18: The LearnPress WordPress plugin before 4.1.3.1 does not properly sanitize or escape various inputs within course settings, which could allow high privilege…