CVE-2020-6010

LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection

• CWE-89

• http://packetstormsecurity.com/files/163536/WordPress-LearnPress-SQL-Injection.html
• https://plugins.trac.wordpress.org/browser/learnpress/trunk/readme.txt?rev=2288975Release Notes
• https://research.checkpoint.com/2020/e-learning-platforms-getting-schooled-multiple-vulnerabilities-in-wordpress-most-popular-learning-management-system-plugins/Exploit, Third Party Advisory
• https://wordpress.org/plugins/learnpress/#developersRelease Notes
• http://packetstormsecurity.com/files/163536/WordPress-LearnPress-SQL-Injection.html
• https://plugins.trac.wordpress.org/browser/learnpress/trunk/readme.txt?rev=2288975Release Notes
• https://research.checkpoint.com/2020/e-learning-platforms-getting-schooled-multiple-vulnerabilities-in-wordpress-most-popular-learning-management-system-plugins/Exploit, Third Party Advisory
• https://wordpress.org/plugins/learnpress/#developersRelease Notes

Published

Apr 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-6004Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-6005Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-6006Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-6007Philips Hue Bridge model 2.X prior to and including version …7.9
• CVE-2020-6008LifterLMS Wordpress plugin version below 3.37.15 is vulnerab…9.8
• CVE-2020-6009LearnDash Wordpress plugin version below 3.1.6 is vulnerable…9.8
• CVE-2020-6012ZoneAlarm Anti-Ransomware before version 1.0.713 copies file…7.4
• CVE-2020-6013ZoneAlarm Firewall and Antivirus products before version 15.…8.8
• CVE-2020-6014Check Point Endpoint Security Client for Windows, with Anti-…6.5
• CVE-2020-6015Check Point Endpoint Security for Windows before E84.10 can …5.5
• CVE-2020-6016Valve's Game Networking Sockets prior to version v1.2.0 impr…9.8
• CVE-2020-6017Valve's Game Networking Sockets prior to version v1.2.0 impr…9.8