CVE-2018-16175: SQL Injection
Published Jan 9, 2019
·Updated
SQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.
Affected Software
1 affected component
thimpress Learnpress Wordpress<3.1.0
Event History
Jan 9, 2019
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-16175?
CVE-2018-16175 is a SQL injection vulnerability in the LearnPress plugin for Wordpress prior to version 3.1.0.
2
What is the severity of CVE-2018-16175?
The severity of CVE-2018-16175 is high, with a CVSS score of 7.2.
3
How does CVE-2018-16175 affect LearnPress?
CVE-2018-16175 allows an attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors in LearnPress.
4
How can I fix CVE-2018-16175 in LearnPress?
To fix CVE-2018-16175, upgrade LearnPress to version 3.1.0 or later.
5
Where can I find more information about CVE-2018-16175?
You can find more information about CVE-2018-16175 in the official CVE database and on the WordPress plugin page for LearnPress.