Search
Search Results (9 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-86449 | 2 Learnpress, Wordpress | 2 Learnpress, Wordpress | 2026-09-16 | N/A |
| The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthenticated attackers to list courses that are not published, including draft, pending, private, scheduled and trashed ones. | ||||
| CVE-2026-86444 | 2 Learnpress, Wordpress | 2 Learnpress, Wordpress | 2026-09-16 | N/A |
| The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only sites running a classic, non-block are affected. | ||||
| CVE-2026-86447 | 2 Learnpress, Wordpress | 2 Learnpress, Wordpress | 2026-09-16 | N/A |
| The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative course tools, allowing unauthenticated attackers to list every enrolled student's display name and user identifier against the course they are enrolled on, and to recover their email addresses through the same handler's search filter. | ||||
| CVE-2026-86448 | 2 Learnpress, Wordpress | 2 Learnpress, Wordpress | 2026-09-16 | N/A |
| The LearnPress WordPress plugin before 4.4.7 does not perform any authentication, capability or nonce check before serving a previously generated order export file, allowing unauthenticated attackers who can determine its identifier to download customer names, purchases, amounts and guest email addresses. | ||||
| CVE-2026-78125 | 2 Learnpress, Wordpress | 2 Learnpress, Wordpress | 2026-08-27 | 5.3 Medium |
| The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of its REST endpoints in all versions up to, and including, 4.0.2, allowing unauthenticated attackers to disclose the payment status of arbitrary orders by enumerating order identifiers. | ||||
| CVE-2026-12976 | 2 Learnpress, Wordpress | 2 Learnpress, Wordpress | 2026-08-13 | 6.5 Medium |
| The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in. | ||||
| CVE-2026-12971 | 2 Learnpress, Wordpress | 2 Learnpress, Wordpress | 2026-08-11 | 2.2 Low |
| The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery. | ||||
| CVE-2026-12970 | 2 Learnpress, Wordpress | 2 Learnpress, Wordpress | 2026-07-21 | 7.1 High |
| The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML attribute, leading to Reflected Cross-Site Scripting that executes in the browser of a logged-in instructor or administrator who is tricked into opening a crafted link. | ||||
| CVE-2026-8383 | 2 Learnpress, Wordpress | 2 Learnpress, Wordpress | 2026-06-26 | 5.3 Medium |
| The LearnPress WordPress plugin before 4.3.7 does not gate the `edit` context on one of its REST endpoint behind the `edit_users` capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted request | ||||
Page 1 of 1.