CVE-2025-13964

creationtimestamp| type| source ---|---|--- 2026-01-06 12:48:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqyfahjwi2c...

CVE-2025-13964

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the catchlpajax function in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to modify course contents b...

WordPress LearnPress – WordPress LMS Plugin plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification vulnerability

Missing Authentication to Unauthenticated Course Modification vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin LearnPress versions = 4.3.2...