CVE-2024-2115

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.0. This is due to missing or incorrect nonce validation on the filter_users functions. This makes it possible for unauthenticated attackers to elevate their privileges to that of a teacher via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352
• CWE-352

• https://plugins.trac.wordpress.org/changeset/3061953/learnpress/tags/4.0.1/inc/admin/class-lp-admin.phpBroken Link
• https://www.wordfence.com/threat-intel/vulnerabilities/id/342a4482-f5d3-4cc9-a998-e3abac7142cf?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset/3061953/learnpress/tags/4.0.1/inc/admin/class-lp-admin.phpBroken Link
• https://www.wordfence.com/threat-intel/vulnerabilities/id/342a4482-f5d3-4cc9-a998-e3abac7142cf?source=cveThird Party Advisory

Published

Apr 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21144Vulnerability in the Oracle Java SE, Oracle GraalVM Enterpri…3.7
• CVE-2024-21145Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,…4.8
• CVE-2024-21146Vulnerability in the Oracle Trade Management product of Orac…8.1
• CVE-2024-21147Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,…7.4
• CVE-2024-21148Vulnerability in the Oracle Applications Framework product o…4.8
• CVE-2024-21149Vulnerability in the Oracle Enterprise Asset Management prod…8.1
• CVE-2024-21150Vulnerability in the JD Edwards EnterpriseOne Tools product …6.1
• CVE-2024-21151Vulnerability in the Oracle Solaris product of Oracle System…3.3
• CVE-2024-21152Vulnerability in the Oracle Process Manufacturing Financials…8.1
• CVE-2024-21153Vulnerability in the Oracle Process Manufacturing Product De…8.1
• CVE-2024-21154Vulnerability in the PeopleSoft Enterprise HCM Human Resourc…4.3
• CVE-2024-21155Vulnerability in the Oracle ZFS Storage Appliance Kit produc…4.7