LE
Product
LearnPress
62
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 6High 17Medium 39Low 0
Watch
Add LearnPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-13128 | 4.8 | May 15 | LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS Affected: before 4.2.7.5.1 |
| CVE-2024-13127 | 4.8 | May 15 | LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS Affected: before 4.2.7.5.1 |
| CVE-2024-9881 | 4.8 | Dec 12 | LearnPress < 4.2.7.2 - Admin+ Stored XSS Affected: before 4.2.7.2 |
| CVE-2024-10010 | 4.8 | Dec 12 | LearnPress < 4.2.7.2 - Admin+ Stored XSS Affected: before 4.2.7.2 |
| CVE-2024-1463 | 4.8 | Apr 9 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Course, Lesson, and Quiz title and content in all versions up to,… Affected: before 4.2.6.4 |
| CVE-2021-39348 | 4.8 | Oct 21 | The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom_profile parameter found in the… Affected: through 4.1.3.1 |
| CVE-2021-24702 | 4.8 | Oct 18 | The LearnPress WordPress plugin before 4.1.3.1 does not properly sanitize or escape various inputs within course settings, which could allow high privilege users to perform… Affected: before 4.1.3.1 |
| CVE-2025-24740 | 4.7 | Jan 27 | WordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability Affected: through 4.2.7.1 |
| CVE-2026-39717 | 4.3 | Oct 2 | WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability Affected: through 4.4.10 |
| CVE-2026-82023 | 4.3 | Sep 3 | LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert Affected: before 4.4.6 |
| CVE-2023-6223 | 4.3 | Jan 11 | The LearnPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.5.7 via the /wp-json/lp/v1/profile/course-tab REST… Affected: through 4.2.5.7 |
| CVE-2022-0377 | 4.3 | Feb 28 | Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration Affected: before 4.1.5 |