Description
The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
VibeThemes WPLMS Learning Management System for WordPress, WordPress LMS
Default version status: unaffected
0 to ≤ 1.8.4.1affected
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/6e0e8f5f-8216-4276-a810-860f9b52c447?source=cve ↗
- https://packetstormsecurity.com/files/130291/ ↗
- https://www.rapid7.com/db/modules/auxiliary/admin/http/wp_wplms_privilege_escalation/ ↗
- https://twitter.com/_wpscan_/status/564874637679820800?lang=ca ↗
- https://wpscan.com/vulnerability/7785 ↗
- https://themeforest.net/item/wplms-learning-management-system/6780226 ↗