PT-2022-7084 · WordPress · Learnpress

Rafie Muhammad · Published 2022-12-02 · Updated 2023-02-02 · CVE-2022-47615

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LearnPress – WordPress LMS Plugin versions <= 4.1.7.3.2

Description The issue is related to a Local File Inclusion vulnerability. It concerns the list courses() function of the LearnPress plugin in the WordPress content management system. The vulnerability is associated with insufficient restrictions on the directory path name when processing variables such as template pagination path, template path, and template path item. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information.

Recommendations For LearnPress – WordPress LMS Plugin versions <= 4.1.7.3.2, consider disabling the list courses() function as a temporary workaround until a patch is available. Restrict access to the variables template pagination path, template path, and template path item to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Unrestricted File Upload

Weakness Enumeration

CWE-22

CWE-434

Related Identifiers

BDU:2023-07531

CVE-2022-47615

Affected Products

Learnpress

References · 7

• 🔥 https://patchstack.com/articles/multiple-critical-vulnerabilities-fixed-in-learnpress-plugin-version · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-47615 · Security Note
• https://bdu.fstec.ru/vul/2023-07531 · Security Note
• https://osv.dev/vulnerability/CVE-2022-47615 · Vendor Advisory
• https://securitylab.ru/news/536043.php · Note
• https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-plugin-4-1-7-3-2-local-file-inclusion?_s_id=cve · Note
• https://wpscan.com/vulnerability/21de39ee-6e56-43f7-8d5d-52e0ec542516 · Note