CVE-2024-2115 LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation
Unauthenticated attackers can escalate privileges to teacher via CSRF by tricking admins into clicking a link in LearnPress plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-2115?
CVE-2024-2115 is a high-severity vulnerability in thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses, published on 5 Apr 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.0. This is due to missing or incorrect nonce validation on the filter_users functions. This makes it possible for unauthenticated attackers to elevate their privileges to that of a teacher via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Weakness: CWE-352
Which versions are affected by CVE-2024-2115?
It affects 1 product.
Products include Thimpress Learnpress.
How do I fix CVE-2024-2115?
No fix has been published for CVE-2024-2115 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-2115 being exploited?
There is no known exploitation of CVE-2024-2115 in the wild and no public exploit code.
Other vulnerabilities in thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
- CVE-2024-8522 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'
- CVE-2024-8529 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'
- CVE-2022-45808 WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection
- CVE-2024-4434 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection
- CVE-2023-6567 LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by
Sources
Also known as GHSA-2q2v-8vjq-r8m5.