CVE-2024-6099 LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration
Unauthenticated attackers can bypass registration restrictions to create accounts with default roles in the LearnPress WordPress plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-6099?
CVE-2024-6099 is a medium-severity authentication bypass vulnerability in thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses, published on 2 Jul 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthenticated bypass to user registration in versions up to, and including, 4.2.6.8.1. This is due to missing checks in the 'check_validate_fields' function in the checkout. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled.
Weakness: CWE-420
Which versions are affected by CVE-2024-6099?
It affects 1 product.
Products include Thimpress Learnpress.
How do I fix CVE-2024-6099?
No fix has been published for CVE-2024-6099 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-6099 being exploited?
There is no known exploitation of CVE-2024-6099 in the wild and no public exploit code.
Other vulnerabilities in thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
- CVE-2024-8522 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'
- CVE-2024-8529 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'
- CVE-2022-45808 WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection
- CVE-2024-4434 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection
- CVE-2023-6567 LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by
Sources
Also known as GHSA-cwx6-fw99-mwh9.