blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-0377

MEDIUM 4.3 CVSS 3.1
Published
February 28, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-327
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the image. As a result of this request, the name of the user-supplied image is changed with a MD5 value. This process can be conducted only when type of the image is JPG or PNG. An attacker can use this vulnerability in order to rename an arbitrary image file. By doing this, they could destroy the design of the web site.

Affected WordPress components

  • LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Plugin · learnpress
    Confirmed match Active
    Before 4.1.5
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown LearnPress — Before 4.1.5
  • thimpress learnpress — Before 4.1.5

References

  • bozogullarindan.com https://bozogullarindan.com/en/2022/01/wordpress-learnpress-plugin-4.1.4.1-arbitrary-image-renaming/ Exploit, Third Party Advisory
  • github.com https://github.com/LearnPress/learnpress/commit/d1dc4af7ef2950f1000abc21bd9520fb3eb98faf Patch, Third Party Advisory
  • wpscan.com https://wpscan.com/vulnerability/0d95ada6-53e3-4a80-a395-eacd7b090f26 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record