ID de Prueba:	1.3.6.1.4.1.25623.1.0.112740
Categoría:	Web application abuses
Título:	WordPress LearnPress Plugin < 3.1.0 Multiple Vulnerabilities
Resumen:	LearnPress plugin for WordPress is prone to multiple vulnerabilities.
Descripción:	Summary: LearnPress plugin for WordPress is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - Cross-site scripting (CVE-2018-16173) - Open redirect (CVE-2018-16174) - SQL injection (CVE-2018-16175) Vulnerability Impact: Successful exploitation would allow an attacker to: - execute arbitrary scripts on the logged in user's web browser - lead a logged in user to be redirected to an arbitrary website by creating a specially crafted URL, which may result in a phishing attack - execute arbitrary SQL commands Affected Software/OS: WordPress LearnPress plugin before version 3.1.0. Solution: Update to version 3.1.0 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16173 Common Vulnerability Exposure (CVE) ID: CVE-2018-16174 Common Vulnerability Exposure (CVE) ID: CVE-2018-16175
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.