CVE-2022-45808

CRITICAL EXPLOITED NUCLEI

LearnPress - WordPress LMS Plugin <= 4.1.7.3.2 - SQL Injection

Title source: llm

Exploitation Summary

CVE-2022-45808 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including RandomRobbieBF. A Nuclei detection template is also available.

AI-analyzed exploit summary This repository contains a proof-of-concept for an unauthenticated time-based blind SQL injection vulnerability in the LearnPress Plugin. The exploit leverages the unsanitized 'order_by' parameter in a SQL statement, demonstrated using sqlmap to extract user password hashes.

Description

SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

Exploits (1)

nomisec WORKING POC

by RandomRobbieBF · infoleak

https://github.com/RandomRobbieBF/CVE-2022-45808

View Code ZIP pw:eip

This repository contains a proof-of-concept for an unauthenticated time-based blind SQL injection vulnerability in the LearnPress Plugin. The exploit leverages the unsanitized 'order_by' parameter in a SQL statement, demonstrated using sqlmap to extract user password hashes.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: LearnPress Plugin < 4.2.0

No auth needed

Prerequisites: Access to the target WordPress site with LearnPress Plugin < 4.2.0 · sqlmap installed

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi

CRITICALVERIFIEDby DhiyaneshDK

Shodan: http.html:"/wp-content/plugins/learnpress"

FOFA: body="/wp-content/plugins/learnpress"

References (2)

Core 2

Core References

Third Party Advisory vdb-entry

https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-wordpress-lms-plugin-plugin-4-1-7-3-2-sql-injection?_s_id=cve

Exploit, Third Party Advisory technical-description

https://patchstack.com/articles/multiple-critical-vulnerabilities-fixed-in-learnpress-plugin-version/

Scores

CVSS v3 9.9

EPSS 0.0427

EPSS Percentile 89.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

VulnCheck KEV 2023-01-20

CWE

CWE-89

Status published

Products (2)

thimpress/learnpress < 4.1.7.3.2

ThimPress/LearnPress – WordPress LMS Plugin < 4.1.7.3.2

Published Jan 26, 2023

Tracked Since Feb 18, 2026