CVE-2026-113353

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...

CVE-2026-113353

The LearnPress plugin (versions before 4.4.10 ) is vulnerable to a missing authorization flaw in the admin_course_editor, admin_quiz_editor, and admin_question_editor lp-ajax actions. This vulnerability allows authenticated instructors to modify content belonging to other instructors by reusing t...

CVE-2026-113353 LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...

EUVD-2026-104924

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...