CVE-2020-6010: 
WordPress vulnerability analysis and mitigation

LearnPress WordPress plugin version prior to and including 3.2.6.7 was found to contain a SQL Injection vulnerability (CVE-2020-6010). The vulnerability was discovered in April 2020 and affected the LearnPress plugin, which is one of the most popular Learning Management System (LMS) plugins for WordPress with over 80,000 installations worldwide (Checkpoint Research).

The vulnerability exists in the _get_items method of the LP_Modal_Search_Items class, which fails to properly sanitize user-supplied data from the GET/POST parameter 'current_items' before using it in an SQL query. The vulnerability can be triggered by an authenticated user by calling the Ajax method learnpress_modal_search_items (Checkpoint Research). The vulnerability has been assigned a CVSS v3.1 base score of 8.8 HIGH with a vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability could allow attackers to steal personal information including names, emails, usernames, and passwords. Additionally, in educational contexts, attackers could potentially modify grades, forge certificates, retrieve test answers beforehand, and escalate their privileges to that of a teacher. The platforms also involve payment systems, making financial exploitation possible (Checkpoint Research).

The vulnerability requires authentication to exploit, but is relatively straightforward to execute through the Ajax method. A Metasploit module (auxiliary/scanner/http/wp_learnpress_sqli) has been developed for this vulnerability, indicating its practical exploitability (AttackerKB).

Users are urged to upgrade to LearnPress version 3.2.6.9 or later to address this vulnerability. The fix was implemented by completely removing the vulnerable functions in the patched version (Checkpoint Research).

The vulnerability received significant attention due to its timing during the COVID-19 pandemic when educational institutions were rapidly transitioning to online learning platforms. Security researchers emphasized the critical nature of the vulnerability given the increased reliance on e-learning platforms during this period (Hacker News).