module

Wordpress LearnPress current_items Authenticated SQLi

Disclosed
Apr 29, 2020

Description

LearnPress, a learning management plugin for WordPress,
prior to 3.2.6.8 is affected by an authenticated SQL injection via the
current_items parameter of the post-new.php page.
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.