CVE-2026-12970

The CVE-2026-12970 entry concerns LearnPress for WordPress (before 4.4.1). The vulnerability is a Reflected Cross-Site Scripting flaw where a search parameter is not escaped before being echoed into an HTML attribute (parameter: c_search). This can affect a logged-in instructor or administrator w...