Reading Time: 3 Minutes

LearnPress, a popular WordPress plugin for creating and selling online courses, has been found to contain multiple critical-severity flaws that were discovered by PatchStack.

Unfortunately, the plugin was found to contain multiple critical-severity vulnerabilities that were discovered by PatchStack, including pre-auth SQL injection and local file inclusion. These vulnerabilities can expose sensitive information, allow data modification, and enable arbitrary code execution. These vulnerabilities can expose sensitive information, allow data modification, and enable arbitrary code execution.

These vulnerabilities were discovered between November 30 and December 2, 2022 and reported to the software vendor.

Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: [email protected]

Source: bleepingcomputer.com