CVE-2022-0377

Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the image. As a result of this request, the name of the user-supplied image is changed with a MD5 value. This process can be conducted only when type of the image is JPG or PNG. An attacker can use this vulnerability in order to rename an arbitrary image file. By doing this, they could destroy the design of the web site.

• CWE-327

• https://bozogullarindan.com/en/2022/01/wordpress-learnpress-plugin-4.1.4.1-arbitrary-image-renaming/Exploit, Third Party Advisory
• https://github.com/LearnPress/learnpress/commit/d1dc4af7ef2950f1000abc21bd9520fb3eb98fafPatch, Third Party Advisory
• https://wpscan.com/vulnerability/0d95ada6-53e3-4a80-a395-eacd7b090f26Exploit, Third Party Advisory
• https://bozogullarindan.com/en/2022/01/wordpress-learnpress-plugin-4.1.4.1-arbitrary-image-renaming/Exploit, Third Party Advisory
• https://github.com/LearnPress/learnpress/commit/d1dc4af7ef2950f1000abc21bd9520fb3eb98fafPatch, Third Party Advisory
• https://wpscan.com/vulnerability/0d95ada6-53e3-4a80-a395-eacd7b090f26Exploit, Third Party Advisory

Published

Feb 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0371An issue has been discovered in GitLab CE/EE affecting all v…4.3
• CVE-2022-0372Cross-site Scripting (XSS) - Stored in Packagist bytefury/cr…5.4
• CVE-2022-0373Improper access control in GitLab CE/EE versions 12.4 to 14.…4.3
• CVE-2022-0374Cross-site Scripting (XSS) - Stored in Packagist remdex/live…5.4
• CVE-2022-0375Cross-site Scripting (XSS) - Stored in Packagist remdex/live…4.8
• CVE-2022-0376The User Meta WordPress plugin before 2.4.3 does not sanitis…4.8
• CVE-2022-0378Cross-site Scripting (XSS) - Reflected in Packagist microweb…5.4
• CVE-2022-0379Cross-site Scripting (XSS) - Stored in Packagist microweber/…5.4
• CVE-2022-0380The Fotobook WordPress plugin is vulnerable to Reflected Cro…6.1
• CVE-2022-0381The Embed Swagger WordPress plugin is vulnerable to Reflecte…6.1
• CVE-2022-0382An information leak flaw was found due to uninitialized memo…5.5
• CVE-2022-0383The WP Review Slider WordPress plugin before 11.0 does not s…7.2