Extension WordPress
Vulnérabilités Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS
Cette page rassemble les failles publiées pour Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS
4 fiches
Paid Memberships Pro – Courses for Membership Add On <= 1.2.3 – Missing Authorization to Authenticated (Subscriber+) Course Modifications
The Paid Memberships Pro – Courses for Membership Add On plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the pmpro_courses_update_course_callback() and pmpro_courses_remove_course_callback() functions called via AJAX actions in versions up…
[*, 1.2.4)
1.2.4
08/08/2023
Paid Memberships Pro – Courses for Membership Add On <= 1.2.4 – Authenticated (Admin+) Stored Cross-Site Scripting
The Paid Memberships Pro – Courses for Membership Add On plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmpro_courses_modules' setting in versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping.…
[*, 1.2.5)
1.2.5
08/08/2023
Paid Memberships Pro – Courses for Membership Add On <= 1.2.3 – Cross-Site Request Forgery to Course Modifications
The Paid Memberships Pro – Courses for Membership Add On plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce verification on the pmpro_courses_update_course_callback() and pmpro_courses_remove_course_callback() functions called via AJAX actions in versions up to,…
[*, 1.2.4)
1.2.4
08/08/2023
Premium Courses & eLearning <= 1.0.5 – SQL Injection
The Premium Courses & eLearning plugin for WordPress is vulnerable to SQL Injection via the ‘level_ids’ parameter in several of its modules in versions up to, and including, 1.0.5 due to insufficient escaping on the user supplied parameter…
*-1.0.5
1.1
15/06/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.