LE
Product
LearnPress
15
CVEs
0
On KEV
7.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 10Low 3
Watch
Add LearnPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86444 | 7.1 | Sep 16 | LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter Affected: 4.2.6.4 before 4.4.7 |
| CVE-2026-12970 | 7.1 | Jul 20 | LearnPress < 4.4.1 - Reflected XSS via c_search Affected: before 4.4.1 |
| CVE-2026-12976 | 6.5 | Aug 12 | LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant Affected: before 4.4.4 |
| CVE-2026-86449 | 5.3 | Sep 16 | LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API Affected: 4.2.7.1 before 4.4.7 |
| CVE-2026-86447 | 5.3 | Sep 16 | LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajax Affected: 4.4.6 before 4.4.7 |
| CVE-2026-86445 | 5.3 | Sep 16 | LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax Affected: 4.2.9 before 4.4.7 |
| CVE-2026-78125 | 5.3 | Aug 27 | LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status Disclosure Affected: before 4.0.3 |
| CVE-2026-8383 | 5.3 | Jun 17 | LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API Affected: before 4.3.7 |
| CVE-2024-13128 | 4.8 | May 15 | LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS Affected: before 4.2.7.5.1 |
| CVE-2024-13127 | 4.8 | May 15 | LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS Affected: before 4.2.7.5.1 |
| CVE-2024-9881 | 4.8 | Dec 12 | LearnPress < 4.2.7.2 - Admin+ Stored XSS Affected: before 4.2.7.2 |
| CVE-2024-10010 | 4.8 | Dec 12 | LearnPress < 4.2.7.2 - Admin+ Stored XSS Affected: before 4.2.7.2 |
| CVE-2026-86446 | 3.7 | Sep 17 | LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint Affected: 4.4.3 before 4.4.7 |
| CVE-2026-86448 | 3.7 | Sep 16 | LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_order Affected: 4.3.2.8 before 4.4.7 |
| CVE-2026-12971 | 2.2 | Aug 10 | LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature Affected: before 4.4.4 |
Showing 15