CVE-2023-6634 Scanner
CVE-2023-6634 scanner - Remote Code Execution (RCE) vulnerability in LearnPress plugin for WordPress
Used 2.6k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2023-6634
9.8
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function. This is due to the plugin making use of the call_user_func function with user input. This makes it possible for unauthenticated attackers to execute any public function with one parameter, which could result in remote code execution.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
learnpress – wordpress lms plugin for create and sell online courses
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: learnpress – wordpress lms plugin for create and sell online courses
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →