WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability

CVE-2023-36515

What is CVE-2023-36515?

A missing authorization vulnerability has been identified in the ThimPress LearnPress Plugin, which compromises the security of installations running versions up to 4.2.3. This vulnerability allows unauthorized users to gain access to sensitive functionalities, potentially leading to unauthorized actions within the system. Maintaining robust access controls is critical to ensuring the integrity and security of web applications that utilize this plugin.

References