Medium severity · published Oct 20, 2026
CVE-2026-113353
LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
5.4
CVSS
0.3%
EPSS
No
On KEV
Description
LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another object's id parameter to alter courses, change quiz answers, and trash questions.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LE
LearnPress · ThimPress
before 4.4.10 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-113353
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-113353
github.com
https://github.com/LearnPress/learnpress/commit/77087dcdc0e974e8d0844453b4071189fc2c70d2
learnpresslms.com
https://learnpresslms.com/changelog/
plugins.svn.wordpress.org
https://plugins.svn.wordpress.org/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php
plugins.svn.wordpress.org
https://plugins.svn.wordpress.org/learnpress/tags/4.4.9.1/inc/admin/editor/class-lp-admin-editor-course.php
wordpress.org
https://wordpress.org/plugins/learnpress/
www.vulncheck.com
https://www.vulncheck.com/advisories/learnpress-before-4.4.10-missing-authorization-via-legacy-editor-ajax-handlers
More from LearnPress
9.8
CVE-2023-36515
WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability
9.8
CVE-2024-4434
LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection
9.8
CVE-2023-6634
LearnPress <= 4.2.5.7 - Command Injection
9.8
CVE-2022-47615
Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions
9.8
CVE-2022-45808
SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions