CVE-2024-4444

low-risk
Published 2024-05-14

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 4.2.6.5. This is due to missing checks in the 'create_account' function in the checkout. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled.

Do I need to act?

-
0.93% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Thimpress

References (8)

Exploit https://inky-knuckle-2c2.notion.site/Improper-Authentication-in-checkout-leads-p...
Broken Link https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.5/inc/class-lp-...
Broken Link https://plugins.trac.wordpress.org/changeset/3082204/
Third Party Advisory https://www.wordfence.com/threat-intel/vulnerabilities/id/c9e1410f-10c9-4654-8b6...
Exploit https://inky-knuckle-2c2.notion.site/Improper-Authentication-in-checkout-leads-p...
Broken Link https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.5/inc/class-lp-...
Broken Link https://plugins.trac.wordpress.org/changeset/3082204/
Third Party Advisory https://www.wordfence.com/threat-intel/vulnerabilities/id/c9e1410f-10c9-4654-8b6...
29
/ 100
low-risk
Severity 21/34 · High
Exploitability 3/34 · Minimal
Exposure 5/34 · Minimal