CVE-2019-15775

中危 6.1CVE-2019-15775 · Published 29/08/2019 · updated 17/06/2026

要点

CVE-2019-15775 是影响 learning courses (learning courses project) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：1.3%，高于 71.6% 的漏洞。
修复：升级到 4.8 或更高版本。

Package	Affected versions	Patched versions
learning courses learning_courses_project	`< 4.8`	`4.8`

The nd-learning plugin before 4.8 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.