Information Disclosure in LearnPress WordPress Plugin

Executive Summary

This vulnerability affects the LearnPress WordPress plugin before version 4.4.7. It allows unauthenticated attackers to access and retrieve the text, identifier, and type of every published quiz question on a site. Attackers can also perform keyword searches over these questions, which are normally kept private. The issue occurs because the plugin fails to check user capabilities in one of its administrative template handlers.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your LearnPress plugin version is below 4.4.7. Use WordPress admin to view plugin versions or run SQL queries on the database to check the version. Commands like 'wp plugin list' in WP-CLI or checking the plugin's main file for version info can help.

Useful 0 Not Useful 0

Impact Analysis

Unauthenticated attackers could access sensitive quiz content, including question text and identifiers, which may reveal proprietary or confidential information. This could lead to intellectual property theft, competitive disadvantages, or exposure of internal training materials. The vulnerability also enables attackers to search and analyze quiz content, potentially identifying patterns or weaknesses in the questions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations like GDPR or HIPAA if quiz content includes personal or sensitive data. Unauthorized access to such data may violate confidentiality requirements, leading to legal penalties, fines, or reputational damage. Organizations must ensure unauthorized access to quiz content is prevented to maintain compliance.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the LearnPress plugin to version 4.4.7 or later. If updating is not possible, consider disabling the plugin temporarily until an update is applied. Ensure your WordPress installation and other plugins are also up to date.

Useful 0 Not Useful 0