CVE-2022-47615: Detailed Vulnerability Analysis and Overview

CVE-2022-47615 Vulnerability Summary

Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

CVE-2022-47615: Detailed Information and External References

EPSS

0.04911

EPSS %

0.92994

References

0.04911

• https://patchstack.com/articles/multiple-critical-vulnerabilities-fixed-in-learnpress-plugin-version/
• https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-plugin-4-1-7-3-2-local-file-inclusion?_s_id=cve

CWE

CWE-434

CAPEC

0.04911

• Accessing Functionality Not Properly Constrained by ACLs: In applications, particularly web applications, access to functionality is mitigated by an authorization framework. This framework maps Access Control Lists (ACLs) to elements of the application's functionality; particularly URL's for web apps. In the case that the administrator failed to specify an ACL for a particular element, an attacker may be able to access it with impunity. An attacker with the ability to access functionality not properly constrained by ACLs can obtain sensitive information and possibly compromise the entire application. Such an attacker can access resources that must be available only to users at a higher privilege level, can access management sections of the application, or can run queries for data that they otherwise not supposed to.

Vulnerable Configurations

• cpe:2.3:a:thimpress:learnpress:-:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:-:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:1.0:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:1.0:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.0.6:-:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.0.6:-:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.0.6:beta.1:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.0.6:beta.1:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.0.9:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.0.9:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.1.0:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.1.0:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.1.3:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.1.3:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.1.4:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.1.4:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.1.5.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.1.5.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.1.5.3:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.1.5.3:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.1.6:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.1.6:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.1.7:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.1.7:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:2.1.8:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:2.1.8:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.0.0:closebeta.1:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.0.0:closebeta.1:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.0.0:closebeta.2:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.0.0:closebeta.2:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.1:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.1:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.2:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.2:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.3:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.3:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.4:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.4:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.5:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.5:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.6:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.0.0:openbeta.6:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.1.0:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.1.0:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.5.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.5.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.6.5:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.6.5:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.6.7:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.6.7:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.6.8:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.6.8:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.6.9:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.6.9:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.6.10:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.6.10:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7.3:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7.3:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7.4:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7.4:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7.5:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7.5:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7.6:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7.6:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7.7:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7.7:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7.8:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7.8:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.7.9:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.7.9:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.8:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.8:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.8.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.8.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.8.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.8.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.8.3:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.8.3:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.8.4:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.8.4:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.8.5:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.8.5:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.8.6:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.8.6:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.8.7:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.8.7:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:3.2.8.8:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:3.2.8.8:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.0:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.0:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.3:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.3:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.4:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.4:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.5:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.5:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.6:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.6:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.7:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.7:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.8:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.8:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.0.9:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.0.9:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.0:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.0:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.3:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.3:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.3.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.3.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.3.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.3.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.4:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.4:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.4.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.4.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.5:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.5:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.3:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.3:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.4:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.4:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.5:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.5:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.6:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.6:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.7:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.7:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.8:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.8:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.9:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.9:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.9.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.9.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.9.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.9.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.6.9.3:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.6.9.3:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.7:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.7:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.7.1:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.7.1:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.7.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.7.2:*:*:*:*:wordpress:*:*
• cpe:2.3:a:thimpress:learnpress:4.1.7.3.2:*:*:*:*:wordpress:*:*
  cpe:2.3:a:thimpress:learnpress:4.1.7.3.2:*:*:*:*:wordpress:*:*

CVSS3 Source

nvd@nist.gov

CVSS3 Type

Primary

CVSS3 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H