1138 matches found
CVE-2026-113353
The LearnPress plugin (versions before 4.4.10 ) is vulnerable to a missing authorization flaw in the admin_course_editor, admin_quiz_editor, and admin_question_editor lp-ajax actions. This vulnerability allows authenticated instructors to modify content belonging to other instructors by reusing t...
CVE-2026-113353 LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...
EUVD-2026-104924
LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...
PT-2026-118337
LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin course editor, admin quiz editor and admin question editor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with anoth...
CVE-2026-110363
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...
EUVD-2026-104257
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...
CVE-2026-110363
The ThimPress LearnPress WordPress plugin (versions up to and including 4.4.10 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels. The impact involves unauthorized access or actions due to broke...
CVE-2026-110363 WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by MD Mahmidul Hasan in WordPress Plugin LearnPress versions = 4.4.10...
CVE-2026-110363: Missing Authorization
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...
WordPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration vulnerability
Missing Authorization to Authenticated Subscriber+ Email Address Enumeration vulnerability discovered by Kuba in WordPress Plugin LearnPress versions = 4.4.10...
CVE-2026-107744
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...
CVE-2026-104736
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through sanitizetextfield, which does not stri...
CVE-2026-107744 LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...
EUVD-2026-103230
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...
CVE-2026-107744
The LearnPress – WordPress LMS Plugin is vulnerable to an authorization bypass in all versions up to and including 4.4.10 . The flaw occurs because the plugin fails to properly verify user permissions during the 'search-authors' AJAX action . This allows authenticated attackers with subscriber-le...
CVE-2026-107744 LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...
CVE-2026-104736 LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through sanitizetextfield, which does not stri...
EUVD-2026-103224
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through sanitizetextfield, which does not stri...