Unknown LearnPress

• CVE-2026-86446 Low 3.7 LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint 0.3%
• CVE-2026-86449 Medium 5.3 LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API 0.3%
• CVE-2026-86448 Low 3.7 LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_order 0.3%
• CVE-2026-86447 Medium 5.3 LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajax 0.3%
• CVE-2026-86445 Medium 5.3 LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax 0.3%
• CVE-2026-86444 High 7.1 LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter 0.3%
• CVE-2026-78125 Medium 5.3 LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status Disclosure 0.3%
• CVE-2026-12976 Medium 6.5 LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant 0.4%
• CVE-2026-12971 Low 2.2 LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature 0.2%
• CVE-2026-12970 High 7.1 LearnPress < 4.4.1 - Reflected XSS via c_search 0.5%
• CVE-2026-8383 Medium 5.3 LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API 7.6%
• CVE-2024-13128 Medium 4.8 LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS 0.4%
• CVE-2024-13127 Medium 4.8 LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS 0.3%
• CVE-2024-9881 Medium 4.8 LearnPress < 4.2.7.2 - Admin+ Stored XSS 0.4%
• CVE-2024-10010 Medium 4.8 LearnPress < 4.2.7.2 - Admin+ Stored XSS 0.5%
• CVE-2023-5558 Medium 6.1 LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting 0.9%
• CVE-2022-0377 Unrated LearnPress < 4.1.5 - Arbitrary Image Renaming 3.2%