CyberRota Analysis
AI-GeneratedThe LearnPress WordPress plugin prior to version 4.4.7 is vulnerable to unauthorized access, allowing unauthenticated attackers to retrieve correct answers and instructor explanations for quiz questions in courses that do not require enrollment. This flaw poses a significant risk to the integrity of course content and could undermine the educational value of the platform. WordPress site administrators using the LearnPress plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken without enrolling.