Multiple Vulnerabilities in WordPress’ Most Popular E-Learning Plugins

guest · Apr 30, 2020

Bugs in WordPress plugins for online courses let students cheat
April 30, 2020
https://www.bleepingcomputer.com/ne...lugins-for-online-courses-let-students-cheat/

Popular WordPress plugins for creating learning management systems (LMS) are rife with vulnerabilities that can be exploited to take control of the platform, get test answers, and modify grades.
Significant impact
LearnPress, LearnDash, and LifterLMS are together part of at least 100,000 websites. Some of them are managed by accredited educational institutions like schools, academies, and universities (Florida, Washington, Michigan); others are a used by companies to deliver training sessions (paid or free).
Security researchers at Check Point analyzing the three WordPress plugins found bugs that are more or less trivial to exploit. They provide technical details in a report released today.

Some of the vulnerabilities could be exploited without authentication and achieve remote code execution, meaning that an external attacker could take over the LMS platform.
Click to expand...

Check Point has informed the developers of the three plugins of the discovered vulnerabilities and new versions have been released to fix the issues. Administrators of websites running these plugins are strongly advised to install the updates.
Click to expand...

Check Point Research: E-Learning Platforms Getting Schooled – Multiple Vulnerabilities in WordPress’ Most Popular Learning Management System Plugins

In total, we found 4 vulnerabilities that were assigned CVE-2020-6008, CVE-2020-6009 and CVE-2020-6010 and one duplicate CVE-2020-11511.
These vulnerabilities allow students and sometimes even unauthenticated users to gain sensitive information, edit personal records, and even take control of the LMS platforms.

Due to the recent increase in the popularity of E-Learning platforms, these are urgent issues. The developers have since released fixes to the platforms.
Click to expand...

Log in or Sign up

Multiple Vulnerabilities in WordPress’ Most Popular E-Learning Plugins

guest Guest

Log in or Sign up

Multiple Vulnerabilities in WordPress’ Most Popular E-Learning Plugins

guest Guest

Useful Searches