PT-2024-17469 · WordPress · Wp Courses Lms

Thanh Nam Tran · Published 2024-12-12 · Updated 2024-12-12 · CVE-2024-12172

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress versions up to, and including, 3.2.21

Description The issue is related to unauthorized access due to a missing capability check on the wpc update user meta option() function. This allows authenticated attackers with Subscriber-level access and above to update arbitrary user's metadata. By setting wp capabilities to 0, an attacker can block an administrator from accessing their site.

Recommendations For versions up to, and including, 3.2.21, update to a version that includes a fix for the missing capability check in the wpc update user meta option() function. As a temporary workaround, consider restricting access to the wpc update user meta option() function until a patch is available.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-12172

Affected Products

Wp Courses Lms

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-12172 · Security Note
• https://twitter.com/VulmonFeeds/status/1867222006661251163 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/760e999e-cac9-493f-9737-ad0cf055c880?source=cve · Note
• https://t.me/cvedetector/12731 · Telegram Post
• https://twitter.com/CVEnew/status/1867171888834752761 · Twitter Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3203679%40wp-courses&new=3203679%40wp-courses&sfp_email=&sfph_mail= · Note
• https://t.me/latest_high_impact_cve/1636 · Telegram Post