PT-2024-17776 · WordPress · Learnpress

Drop + 1 · Published 2024-04-09 · Updated 2025-01-09 · CVE-2024-1289

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions LearnPress – WordPress LMS Plugin versions up to, and including, 4.2.6.3

Description The issue allows authenticated attackers to obtain information on orders placed by other users and guests due to missing validation on a user controlled key when looking up order information. This can be leveraged to sign up for paid courses that were purchased by guests, and emails of other users are also exposed.

Recommendations For versions up to, and including, 4.2.6.3, update to a version later than 4.2.6.3 to resolve the issue. As a temporary workaround, consider restricting access to order information lookup functionality until a patch is available.

Fix

Improper Authorization

IDOR

Weakness Enumeration

CWE-285

CWE-639

Related Identifiers

CVE-2024-1289

Affected Products

Learnpress

References · 5

• https://osv.dev/vulnerability/CVE-2024-1289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1289 · Security Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3042945%40learnpress%2Ftags%2F4.2.6.3&new=3061851%40learnpress%2Ftags%2F4.2.6.4 · Note
• https://t.me/cvenotify/106955 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/0c410d91-08cc-496d-9c8e-c57f107399da?source=cve · Note