CVE-2026-109208

The LearnPress – WordPress LMS Plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 4.4.10 . The root cause is insufficient input sanitization and output escaping within the 'quantity (REST)' and 'order_comments (checkout)' parameters. This allows an attacker ...

EUVD-2026-103216

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity REST / ordercomments checkout' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output...