Wpcoursesplugin

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wpcoursesplugin records in CISA KEV

No Wpcoursesplugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp-courses 1 record MEDIUM

Records

1 record in Wp-courses · all components

TI-2020-16306 CVE-2020-26876 · GHSA-rjxr-p6mg-hvgf

The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the…

MEDIUM 46

The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for course videos and materials) by using the /wp-json REST API, as exploited in the wild in September 2020.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10551 Published 2020-10-07 No fix listed CWE-306

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0