Medium severity · published Sep 16, 2026
CVE-2026-86445
LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative template handlers, allowing unauthenticated attackers to retrieve the text, identifier and type of every published quiz question on the site, along with a keyword search over them, which is content the LearnPress WordPress plugin before 4.4.7 otherwise keeps non-public.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LE
LearnPress ·
4.2.9 before 4.4.7 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-86445
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-86445
wpscan.com
https://wpscan.com/vulnerability/df2d1ebb-ac1d-430d-8e99-7d88df47cf5b/
More from LearnPress
7.1
CVE-2026-86444
LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter
7.1
CVE-2026-12970
LearnPress < 4.4.1 - Reflected XSS via c_search
6.5
CVE-2026-12976
LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant
6.1
CVE-2023-5558
LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting
5.3
CVE-2026-86449
LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API