Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
be_teacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress allows any registered user to assign itself the teacher role via the wp-admin/admin-ajax.php?action=learnpress_be_teacher URI without any additional permission checks. Therefore, any user can change its role to an instructor/teacher and gain access to otherwise restricted data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress LearnPress 安全漏洞
Vulnerability Description
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。LearnPress是使用在其中的一个学习管理系统插件。 WordPress LearnPress 3.2.6.5及之前版本中的class-lp-admin-ajax.php文件的be_teacher存在安全漏洞。攻击者可借助wp-admin/admin-ajax.php?action=learnpress_be_teacher URI利用该漏洞无需权限检查便可获取教师
CVSS Information
N/A
Vulnerability Type
N/A