Critical Information Disclosure on WP Courses plugin <= 2.0.29 exposes private course videos and materials

Click the icon to Follow me:- twitterTelegramRedditDiscord

Posted by Red Timmy Security on Sep 29

WP Courses is a WordPress plugin allowing to define courses with
lessons. The course can be:

– accessible to everyone without authentication;
– only available for logged-in users;
– only available for logged-in and paying users.

In the latter case, only when a user is registered to WordPress and has
bought the product via a third plugin (for example WooCommerce) the
contents of the lessons are shown.

We have stumbled upon a severe…

If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.

Patreon

Original Source