| CVE-2026-86446 |
The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is…
|
3.7
Low
|
Sep 17, 2026 |
| CVE-2026-86445 |
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative…
|
5.3
Medium
|
Sep 16, 2026 |
| CVE-2026-86447 |
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative course…
|
5.3
Medium
|
Sep 16, 2026 |
| CVE-2026-86448 |
The LearnPress WordPress plugin before 4.4.7 does not perform any authentication, capability or nonce check before…
|
3.7
Low
|
Sep 16, 2026 |
| CVE-2026-86449 |
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied…
|
5.3
Medium
|
Sep 16, 2026 |
| CVE-2026-86444 |
The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute…
|
7.1
High
|
Sep 16, 2026 |
| CVE-2026-78125 |
The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of its REST endpoints in…
|
5.3
Medium
|
Aug 27, 2026 |
| CVE-2026-12976 |
The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing…
|
6.5
Medium
|
Aug 12, 2026 |
| CVE-2026-12971 |
The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it,…
|
2.2
Low
|
Aug 10, 2026 |
| CVE-2026-12970 |
The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML…
|
7.1
High
|
Jul 20, 2026 |
| CVE-2026-8383 |
The LearnPress WordPress plugin before 4.3.7 does not gate the `edit` context on one of its REST endpoint behind the…
|
5.3
Medium
|
Jun 17, 2026 |
| CVE-2024-13128 |
The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow…
|
4.8
Medium
|
May 15, 2025 |
| CVE-2024-13127 |
The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow…
|
4.8
Medium
|
May 15, 2025 |
| CVE-2024-9881 |
The LearnPress WordPress plugin before 4.2.7.2 does not sanitise and escape some of its settings, which could allow…
|
4.8
Medium
|
Dec 12, 2024 |
| CVE-2024-10010 |
The LearnPress WordPress plugin before 4.2.7.2 does not sanitise and escape some of its settings, which could allow…
|
4.8
Medium
|
Dec 12, 2024 |
| CVE-2023-5558 |
The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user input before outputting it back in…
|
6.1
Medium
|
Jan 16, 2024 |
| CVE-2022-0377 |
Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration
|
Not rated
|
Feb 28, 2022 |