Medium
CVE-2024-3560
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 106
Reset filters
Medium
CVE-2024-32588
LearnPress Export Import <= 4.0.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-31241
LearnPress Export Import <= 4.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-1463
LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting
High
CVE-2024-2115
LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-1289
LearnPress <= 4.2.6.3 - Insecure Direct Object Reference
High
CVE-2023-6634
LearnPress <= 4.2.5.7 - Command Injection
Critical
CVE-2023-6567
LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by
Medium
CVE-2023-6223
LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure
Medium
CVE-2023-5558
LearnPress <= 4.2.5.3 - Reflected Cross-Site Scripting via add_internal_scripts_to_head
Medium
389277fd-e47e-42df-9305-61ceedbcfb29
LearnPress <= 4.2.3 - Missing Authorization
High
CVE-2023-36515
LearnPress <= 4.2.3 - Missing Authorization to Information Exposure
Medium
CVE-2023-36516
LearnPress <= 4.2.3 - Missing Authorization
Medium
CVE-2023-30487
LearnPress - Export/Import Courses <= 4.0.2 - Reflected Cross-Site Scripting
Critical
CVE-2022-47615
LearnPress <= 4.1.7.3.2 - Unauthenticated Local File Inclusion
Critical
CVE-2022-45808
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection
High
CVE-2022-45820
LearnPress <= 4.1.7.3.2 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2022-3360
LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection
Medium
d7bee25e-7574-4d3d-ad58-9b30d99de525
LearnPress – WordPress LMS Plugin <= 4.1.6.7 - Reflected Cross-Site Scripting
Medium
ca203777-84ea-47ab-bafc-f2cc8f778fcd
LearnPress – WordPress LMS Plugin <= 4.1.6.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-0271
LearnPress <= 4.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-0377
LearnPress <= 4.1.4.1 - Arbitrary Image Renaming
Critical
CVE-2021-24951
LearnPress <= 4.1.3 - Authenticated SQL Injection
Medium
CVE-2021-39348
LearnPress <= 4.1.3.1 - Stored Cross-Site Scripting via $custom_profile
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.