{"id":3920,"date":"2024-06-04T20:45:26","date_gmt":"2024-06-04T20:45:26","guid":{"rendered":"http:\/\/127.0.0.1\/lifterlms-plugin-de-wordpress-para-elearning-7-6-2-inyeccion-sql-autenticada-contributor-mediante-shortcode\/"},"modified":"2024-06-04T20:45:26","modified_gmt":"2024-06-04T20:45:26","slug":"lifterlms-plugin-de-wordpress-para-elearning-7-6-2-inyeccion-sql-autenticada-contributor-mediante-shortcode","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/lifterlms-plugin-de-wordpress-para-elearning-7-6-2-inyeccion-sql-autenticada-contributor-mediante-shortcode\/","title":{"rendered":"LifterLMS \u2013 Plugin de WordPress para eLearning <= 7.6.2 – Inyecci\u00f3n SQL Autenticada (Contributor+) mediante Shortcode"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2024-4743 afecta al plugin LifterLMS para WordPress, permitiendo a atacantes autenticados realizar Inyecci\u00f3n SQL a trav\u00e9s del atributo orderBy del shortcode lifterlms_favorites en versiones hasta 7.6.2. Esto podr\u00eda resultar en la extracci\u00f3n de informaci\u00f3n sensible de la base de datos. La versi\u00f3n del plugin LifterLMS para eLearning hasta la 7.6.2 es vulnerable a […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1630],"class_list":["post-3920","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-4743"],"yoast_head":"\n