CVE-2026-12971

CVE-2026-12971 affects the LearnPress WordPress plugin prior to version 4.4.4. The vulnerability arises because the plugin does not validate a user-supplied URL before the server fetches it, enabling a user with the instructor role to trigger the server to issue requests to arbitrary external hos...