LearnPress – WordPress LMS Plugin for Create and Sell Online Courses vulnerabilities

Product

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

by thimpress · last CVE Oct 17, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 2High 3Medium 19Low 0

Severity

Exploitation

Watch

Add LearnPress – WordPress LMS Plugin for Create and Sell Online Courses to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-93882	7.5	0%	Oct 1	LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter Affected: through 4.4.8
CVE-2026-13765	7.5	1%	Jul 17	LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints Affected: through 4.4.1
CVE-2026-109208	7.2	0%	Oct 17	LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters Affected: through 4.4.10