CVE-2026-86446

LearnPress WordPress plugin versions 4.4.3 through 4.4.6 do not restrict the correctness flags returned by the check-answer REST endpoint when a quiz answer is checked. On courses configured to be taken without enrolling, unauthenticated attackers can obtain the correct answer to every option of ...