plugin

Quick Learn Vulnerabilities

2 known security issues reported for the Quick Learn WordPress plugin. Most recent disclosed Nov 20, 2024.

1 critical

Running Quick Learn on your site? Check whether your installed version is affected.

Scan your site free

Quick Learn [quick-learn] <= 1.0.1 (unfixed)

unknown

[en] Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Rajesh Thanoch Quick Learn allows Object Injection.This issue affects Quick Learn: from n/a through 1.0.1.

Affected:
up to 1.0.1
Fix:
No patched version reported
Disclosed:
Nov 20, 2024

CVE-2024-52441 on NVD →

Quick Learn <= 1.0.1 - Unauthenticated PHP Object Injection

critical

The Quick Learn plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.0.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via...

CVSS:
9.8
Affected:
up to 1.0.1
Fix:
No patched version reported
Disclosed:
Nov 18, 2024

CVE-2024-52441 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database