CVE-2023-36516: WordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability
Published Jun 19, 2024
·Updated
Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3.
Affected Software
1 affected component
thimpress Learnpress Wordpress<4.2.3.1
Remediation
Information
Update to 4.2.3.1 or a higher version.
Event History
Jun 19, 2024
CVE Published
via MITRE·02:18 PM
Data Sourced
via MITRE·02:18 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-36516?
CVE-2023-36516 is a critical vulnerability that allows unauthorized access due to missing authorization in ThimPress LearnPress.
2
How do I fix CVE-2023-36516?
To fix CVE-2023-36516, update the ThimPress LearnPress plugin to version 4.2.4 or later.
3
What versions of LearnPress are affected by CVE-2023-36516?
CVE-2023-36516 affects all versions of LearnPress up to and including 4.2.3.
4
What type of vulnerability is CVE-2023-36516?
CVE-2023-36516 is classified as a missing authorization vulnerability.
5
Can CVE-2023-36516 be exploited remotely?
Yes, CVE-2023-36516 can potentially be exploited remotely due to its impact on access control.