CVE-2022-45808

Description

References

• patchstack.com/articles/multiple-critical-vulnerabilities-fixed-in-learnpress-plugin-version · Exploit
• patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-wordpress-lms-plugin-plugin-4-1-7-3-2-sql-injection · Third Party Advisory

learnpress 的其他漏洞

• CVE-2024-13128中危 4.8The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow high privilege users …
• CVE-2024-13127中危 4.8The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow high privilege users …
• CVE-2024-13599中危 5.4The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including…
• CVE-2024-9881中危 4.8The LearnPress WordPress plugin before 4.2.7.2 does not sanitise and escape some of its settings, which could allow high privilege users su…
• CVE-2024-10010中危 4.8The LearnPress WordPress plugin before 4.2.7.2 does not sanitise and escape some of its settings, which could allow high privilege users su…