| CVE-2026-86446 |
The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is…
|
3.7
Faible
|
17 sept. 2026 |
| CVE-2026-86445 |
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative…
|
5.3
Moyenne
|
16 sept. 2026 |
| CVE-2026-86447 |
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative course…
|
5.3
Moyenne
|
16 sept. 2026 |
| CVE-2026-86448 |
The LearnPress WordPress plugin before 4.4.7 does not perform any authentication, capability or nonce check before…
|
3.7
Faible
|
16 sept. 2026 |
| CVE-2026-86449 |
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied…
|
5.3
Moyenne
|
16 sept. 2026 |
| CVE-2026-86444 |
The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute…
|
7.1
Élevée
|
16 sept. 2026 |
| CVE-2026-78125 |
The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of its REST endpoints in…
|
5.3
Moyenne
|
27 août 2026 |
| CVE-2026-12976 |
The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing…
|
6.5
Moyenne
|
12 août 2026 |
| CVE-2026-12971 |
The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it,…
|
2.2
Faible
|
10 août 2026 |
| CVE-2026-12970 |
The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML…
|
7.1
Élevée
|
20 juil. 2026 |
| CVE-2026-8383 |
The LearnPress WordPress plugin before 4.3.7 does not gate the `edit` context on one of its REST endpoint behind the…
|
5.3
Moyenne
|
17 juin 2026 |
| CVE-2024-13128 |
The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
15 mai 2025 |
| CVE-2024-13127 |
The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
15 mai 2025 |
| CVE-2024-9881 |
The LearnPress WordPress plugin before 4.2.7.2 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
12 déc. 2024 |
| CVE-2024-10010 |
The LearnPress WordPress plugin before 4.2.7.2 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
12 déc. 2024 |
| CVE-2023-5558 |
The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user input before outputting it back in…
|
6.1
Moyenne
|
16 janv. 2024 |
| CVE-2022-0377 |
Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration
|
Non notée
|
28 févr. 2022 |