CVE-2024-4444

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 4.2.6.5. This is due to missing checks in the 'create_account' function in the checkout. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled.

• CWE-420
• CWE-862

• https://inky-knuckle-2c2.notion.site/Improper-Authentication-in-checkout-leads-privilege-escalation-of-unauthenticated-to-create-accoun-09da24a043884219a891dd1a0fc01af6Exploit
• https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.5/inc/class-lp-checkout.php#L79Broken Link
• https://plugins.trac.wordpress.org/changeset/3082204/Broken Link
• https://www.wordfence.com/threat-intel/vulnerabilities/id/c9e1410f-10c9-4654-8b61-cfcdde696da7?source=cveThird Party Advisory
• https://inky-knuckle-2c2.notion.site/Improper-Authentication-in-checkout-leads-privilege-escalation-of-unauthenticated-to-create-accoun-09da24a043884219a891dd1a0fc01af6Exploit
• https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.5/inc/class-lp-checkout.php#L79Broken Link
• https://plugins.trac.wordpress.org/changeset/3082204/Broken Link
• https://www.wordfence.com/threat-intel/vulnerabilities/id/c9e1410f-10c9-4654-8b61-cfcdde696da7?source=cveThird Party Advisory

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-44414A vulnerability was discovered in FBM_292W-21.03.10V, which …8.8
• CVE-2024-44415A vulnerability was discovered in DI_8200-16.07.26A1, There …6.5
• CVE-2024-4442The Salon booking system plugin for WordPress is vulnerable …9.1
• CVE-2024-4443The Business Directory Plugin – Easy Listing Directories for…7.5
• CVE-2024-44430SQL Injection vulnerability in Best Free Law Office Manageme…9.8
• CVE-2024-44439An issue in Shanghai Zhouma Network Technology CO., Ltd IMS …5.9
• CVE-2024-44445Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-44449Cross Site Scripting vulnerability in Quorum onQ OS v.6.0.0.…6.1
• CVE-2024-4445The WP Compress – Image Optimizer [All-In-One] plugin for Wo…4.3
• CVE-2024-44450Multiple functions are vulnerable to Authorization Bypass in…5.4
• CVE-2024-44459A memory allocation issue in vernemq v2.0.1 allows attackers…7.5
• CVE-2024-4446The Content Views – Post Grid & Filter, Recent Posts, Catego…6.4