Most recent entries from all

cnvd-2018-22941

EUVD-2026-67959

fkie_cve-2018-16174

Open redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

GHSA-r3vj-4pqv-mmhx

Open redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

gsd-2018-16174

jvndb-2018-000117

WordPress LMS plugin "LearnPress" contains multiple vulnerabilities listed below. * Cross-site Scripting (CWE-79) - CVE-2018-16173 * Open Redirect (CWE-601) - CVE-2018-16174 * SQL Injection (CWE-89) - CVE-2018-16175 Daiki Sueyoshi of Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University directly reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.