PT-2024-39073 · WordPress · Learnpress

Abrahack

·

Published

2024-09-11

·

Updated

2026-04-14

·

CVE-2024-8522

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: LearnPress – WordPress LMS Plugin versions up to 4.2.7
Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the c only fields parameter of the "/wp-json/learnpress/v1/courses" REST API endpoint. This vulnerability is due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query, making it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Over 90,000 WordPress sites are potentially at risk.
Recommendations: For versions up to 4.2.7, as a temporary workaround, consider disabling the c only fields parameter in the "/wp-json/learnpress/v1/courses" REST API endpoint until a patch is available. Restrict access to the LearnPress plugin to minimize the risk of exploitation. Avoid using the c only fields parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Improper Neutralization

Weakness Enumeration

CWE-74CWE-89CWE-707

Related Identifiers

BDU:2025-01649
CVE-2024-8522

Affected Products

Learnpress