LearnPress <= 4.2.7.1 - Authenticated (Subscriber+) Open Redirect

2025-01-24 00:00
ardias

Vulnerability Overview

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 4.2.7.1. This is due to insufficient validation on a redirect url supplied. This makes it possible for authenticated attackers, with subscriber-level access and above, to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

Technical Analysis

REMEDIATION: Update to version 4.2.7.2, or a newer patched version --- IDENTIFIER: CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')) The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

External References

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C