ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

• CVE-2026-107744 Medium 6.5 LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action 0.2%
• CVE-2026-104736 Critical 9.8 LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter 2.5%
• CVE-2026-109208 High 7.2 LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters 0.3%
• CVE-2026-92538 Medium 6.1 LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter 0.2%
• CVE-2026-93882 High 7.5 LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter 0.4%
• CVE-2026-12230 Medium 6.4 LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css' 0.3%
• CVE-2026-77823 Medium 4.9 LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter 0.4%
• CVE-2026-75982 Medium 4.4 LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter 0.4%
• CVE-2026-13765 High 7.5 LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints 0.7%
• CVE-2026-12732 Medium 6.4 LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attribute 0.3%
• CVE-2026-11988 Medium 6.5 LearnPress <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameter 0.5%
• CVE-2026-8502 Medium 5.3 LearnPress <= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parameters 0.5%
• CVE-2026-7648 Medium 4.3 LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter 0.4%
• CVE-2026-4365 Critical 9.1 LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion 0.9%
• CVE-2026-4333 Medium 6.4 LearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute 0.3%
• CVE-2026-3225 Medium 4.3 LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion 0.3%
• CVE-2026-3226 Medium 4.3 LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering 0.2%
• CVE-2025-14798 Medium 5.3 LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API 0.3%
• CVE-2025-14802 Medium 5.4 LearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion 0.3%
• CVE-2025-13964 Medium 5.3 LearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification 0.3%
• CVE-2025-13956 Medium 5.3 LearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposure 0.9%
• CVE-2025-14387 Medium 6.4 LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social 0.2%
• CVE-2025-11368 Medium 5.3 LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure 1.0%
• CVE-2025-11372 Medium 6.5 LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation 0.5%
• CVE-2024-13599 Medium 6.4 LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name 0.3%
• CVE-2024-11868 Medium 5.3 LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API 1.2%
• CVE-2024-8522 Critical 10.0 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields' 62.9%
• CVE-2024-8529 Critical 10.0 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields' 12.1%
• CVE-2024-7548 High 8.8 LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter 0.6%
• CVE-2024-6589 High 8.8 LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion 0.8%
• CVE-2024-6099 Medium 5.3 LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration 0.4%
• CVE-2024-6088 Medium 5.3 LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration Bypass 0.6%
• CVE-2024-5483 Medium 5.3 LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API 1.0%
• CVE-2024-4971 Medium 6.4 LearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter 0.3%
• CVE-2024-4277 Medium 6.4 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameter 0.3%
• CVE-2024-4444 Medium 5.3 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration 0.7%
• CVE-2024-4434 Critical 9.8 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection 36.9%
• CVE-2024-4397 High 8.8 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload 1.0%
• CVE-2024-3560 Medium 6.4 LearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-1463 Medium 4.4 LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-1289 Medium 6.5 LearnPress <= 4.2.6.3 - Insecure Direct Object Reference 0.4%
• CVE-2024-2115 High 8.8 LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation 0.3%
• CVE-2023-6567 Critical 9.8 LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by 51.4%
• CVE-2023-6634 High 8.1 LearnPress <= 4.2.5.7 - Command Injection 8.6%
• CVE-2023-6223 Medium 4.3 LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure 0.3%