CVE-2020-11511

PoC ×2—

CVSS 3.1

8.1 high

EPSS

3%p87

Published

Jul 30, 2021 (Jul 30, 2021)

Modified

Jun 17, 2026

Description

The LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the privileges of any user to LP Instructor via the accept-to-be-teacher action parameter.

Vendors: thimpress
Products: learnpress
Ecosystems: WordPress
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news2 stories

Experts found critical flaws in 3 popular e

Security AffairsApr 30, 14:56 UTC · Apr 30, 2020Vulnerability CVE-2020-6010 CVE-2020-6011 CVE-2020-11511+2 CVEs

Critical Bugs Found in 3 Popular e

The Hacker NewsApr 30, 11:07 UTC · Apr 30, 2020Vulnerability CVE-2020-6010 CVE-2020-11511 CVE-2020-6009+1 CVEs