CVE-2020-7916: 
WordPress vulnerability analysis and mitigation

The LearnPress WordPress plugin version 3.2.6.5 and earlier contained a privilege escalation vulnerability (CVE-2020-7916) that was disclosed on March 16, 2020. The vulnerability affected the be_teacher functionality in class-lp-admin-ajax.php, allowing any registered user to elevate their privileges to a teacher role without proper authorization (WPScan).

The vulnerability exists in the wp-admin/admin-ajax.php endpoint with the action parameter 'learnpress_be_teacher'. The flaw allows authenticated users to modify their role to teacher/instructor through this endpoint without proper permission verification. The vulnerability has been assigned a CVSS v3.1 score of 6.5 (Medium) (NVD).

When exploited, this vulnerability allows any registered user to elevate their privileges to a teacher role, gaining unauthorized access to restricted course data and teaching functionality. This could lead to unauthorized access to sensitive course information and the ability to create and modify course content (WPScan).

The vulnerability is relatively easy to exploit as it only requires an authenticated user account and knowledge of the specific endpoint. The attacker can send a request to the wp-admin/admin-ajax.php endpoint with the appropriate action parameter to elevate their privileges (WPScan).

The vulnerability was fixed in LearnPress version 3.2.6.7. Site administrators should update to this version or later to protect against this security issue (WPScan).