CVE-2026-113353

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...

CVE-2026-113353

The LearnPress plugin (versions before 4.4.10 ) is vulnerable to a missing authorization flaw in the admin_course_editor, admin_quiz_editor, and admin_question_editor lp-ajax actions. This vulnerability allows authenticated instructors to modify content belonging to other instructors by reusing t...

EUVD-2026-104924

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...

CVE-2026-113353 LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...

CVE-2026-113353 LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...

CVE-2026-113353 LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admincourseeditor, adminquizeditor and adminquestioneditor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another...

PT-2026-118337

Name of the Vulnerable Software and Affected Versions LearnPress versions prior to 4.4.10 Description An authorization flaw exists in the lp-ajax actions admin course editor, admin quiz editor, and admin question editor. Authenticated instructors can exploit this by reusing their own generic edit...

WordPress LearnPress authorization issue vulnerability

Versions of WordPress LearnPress prior to 4.4.10 have a licensing issue vulnerability. This vulnerability stems from the lack of authorization verification in operations like admincourseeditor, adminquizeditor, and adminquestioneditor lp-ajax. Certified instructors can reuse their own generic...

Exploit for CVE-2026-104736

CVE-2026-104736 — LearnPress PHP object injection !PoCbit...

PT-2026-116352

Name of the Vulnerable Software and Affected Versions LearnPress versions prior to 4.4.11 Description An unauthenticated attacker can perform PHP Object Injection by sending untrusted input through the checkout-email request parameter during the checkout AJAX action. The input is processed by...

CVE-2026-55453 CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quotestring function preserves carriage-return and line-feed characters in a remote printer-controlled marker-message before reportattr writes the value to the...

CVE-2026-55453

The OpenPrinting CUPS printing system is vulnerable to a status-line injection in the backend/ipp.c quote_string() function. Prior to version 2.4.20 , the function fails to properly sanitize carriage-return and line-feed characters in remote printer-controlled marker messages. An attacker can inj...

CVE-2026-55453 CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quotestring function preserves carriage-return and line-feed characters in a remote printer-controlled marker-message before reportattr writes the value to the...

CVE-2026-55480 CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copymodel in scheduler/ipp.c creates a predictable TempDir/.ppd path in an lp-group-writable directory and opens it as root without OEXCL or ONOFOLLOW. Exploitation requires an...

CVE-2026-55480 CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copymodel in scheduler/ipp.c creates a predictable TempDir/.ppd path in an lp-group-writable directory and opens it as root without OEXCL or ONOFOLLOW. Exploitation requires an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: parport: Fixed a race condition between port and client registration. The parport subsystem registers port devices before they are fully initialized, resulting in a race condition where client drivers such as lp can attempt to...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user belonging to the lpadmin group could use the cups web interface to modify configurations and insert malicious lines. As a result, the cupsd process, running as root...

CVE-2026-93882

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::rendermaterialitems callback exposed on the public lp-ajax-handle...

EUVD-2026-90544

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::rendermaterialitems callback exposed on the public lp-ajax-handle...

CVE-2026-93882 LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::rendermaterialitems callback exposed on the public lp-ajax-handle...