Vulnerability in ThimPress LearnPress

[ Description ]Official description

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another object's id parameter to alter courses, change quiz answers, and trash questions.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• github.com/LearnPress/learnpress/commit/77087dcdc0e974e8d0844453b4071189fc2c70d2
• learnpresslms.com/changelog
• plugins.svn.wordpress.org/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php
• plugins.svn.wordpress.org/learnpress/tags/4.4.9.1/inc/admin/editor/class-lp-admin-edito…
• wordpress.org/plugins/learnpress
• www.vulncheck.com/advisories/learnpress-before-4.4.10-missing-authorization-via-legacy-…