CVE-2026-12970

The LearnPress WordPress plugin, in versions before 4.4.1 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The flaw occurs because the plugin fails to properly escape a search parameter before reflecting it into an HTML attribute . An attacker could trick a logged-in instructor or admini...