CVE-2022-47615

CRITICAL EXPLOITED NUCLEI

LearnPress - WordPress LMS Plugin <= 4.1.7.3.2 - Local File Inclusion

Title source: llm

Exploitation Summary

CVE-2022-47615 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including RandomRobbieBF. A Nuclei detection template is also available.

AI-analyzed exploit summary This exploit targets an unauthenticated Local File Inclusion (LFI) vulnerability in the LearnPress Plugin before version 4.2.0. It abuses the `template_path` parameter in the `lp/v1/courses/archive-course` REST endpoint to read arbitrary files from the server.

Description

Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

Exploits (1)

nomisec WORKING POC

by RandomRobbieBF · infoleak

https://github.com/RandomRobbieBF/CVE-2022-47615

View Code ZIP pw:eip

This exploit targets an unauthenticated Local File Inclusion (LFI) vulnerability in the LearnPress Plugin before version 4.2.0. It abuses the `template_path` parameter in the `lp/v1/courses/archive-course` REST endpoint to read arbitrary files from the server.

Classification

Working Poc 95%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: LearnPress Plugin < 4.2.0

No auth needed

Prerequisites: Target must have LearnPress Plugin < 4.2.0 installed · REST API endpoint must be accessible

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1083 - File and Directory Discovery

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

LearnPress Plugin < 4.2.0 - Local File Inclusion

CRITICALVERIFIEDby DhiyaneshDK

Shodan: http.html:/wp-content/plugins/learnpress

FOFA: body=/wp-content/plugins/learnpress

References (2)

Core 2

Core References

Third Party Advisory vdb-entry

https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-plugin-4-1-7-3-2-local-file-inclusion?_s_id=cve

Exploit, Patch, Third Party Advisory technical-description

https://patchstack.com/articles/multiple-critical-vulnerabilities-fixed-in-learnpress-plugin-version/

Scores

CVSS v3 9.3

EPSS 0.0506

EPSS Percentile 91.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

VulnCheck KEV 2023-01-20

CWE

CWE-434

Status published

Products (2)

thimpress/learnpress < 4.2.0

ThimPress/LearnPress – WordPress LMS Plugin < 4.1.7.3.2

Published Jan 26, 2023

Tracked Since Feb 18, 2026