CVE-2020-6010: LearnPress WordPress plugin SQL injection up to 3.2.6.7

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

high priorityCVSS 8.8 with high confidentiality, integrity, and availability impact plus a very high EPSS percentile, though exploitation requires a low-privileged account and no KEV listing.

What it is

LearnPress, a WordPress learning management system plugin, is vulnerable to SQL injection in versions up to and including 3.2.6.7. The flaw allows a low-privileged authenticated user to inject SQL through plugin input, which matters because the plugin is widely deployed on e-learning sites and the injection can expose or alter database contents.

Impact

An attacker with a low-privileged account can read, modify, or delete data in the underlying WordPress database, including user and course records. Full compromise of confidentiality, integrity, and availability of the database is possible.

Attack surface

Reachable over the network through the WordPress plugin's request handling; the CVSS vector requires low privileges (PR:L) and no user interaction (UI:N). No authentication bypass is needed, but a valid low-privileged account is required.

Exploitation

Not listed in CISA KEV, but EPSS is 0.49231 (98.8th percentile), indicating high predicted exploitation activity. A public exploit reference is tagged in the Check Point research advisory.

What to do

• Update LearnPress to a version newer than 3.2.6.7 as soon as possible.
• If immediate patching is not possible, disable or remove the LearnPress plugin until it can be updated.
• Restrict account creation and review low-privileged user roles to limit who can reach the vulnerable input.
• Apply a web application firewall rule targeting SQL injection patterns against LearnPress endpoints.
• Audit database accounts and WordPress users for signs of tampering after exposure.

Detection

• Review web server and WAF logs for SQL injection patterns in requests to LearnPress plugin paths.
• Monitor database query logs for anomalous SELECT, UNION, or stacked queries originating from the web application.
• Check for unexpected changes to WordPress users, course content, or plugin settings.
• Correlate activity from low-privileged accounts with unusual database access or error responses.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.