Plugin icon

LearnPress – Backup & Migration Tool

learnpress-import-export

Vulnerabilities:

9

Last Updated:

May 25, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-06-05
Title
LearnPress < 4.1.5 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'import-user-file' Parameter
Fixed in
Fixed in 4.1.5
CVSS
4.9 (medium)
Published
2026-06-05
Title
LearnPress – Backup & Migration Tool < 4.1.5 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload
Fixed in
Fixed in 4.1.5
CVSS
6.6 (medium)
Published
2026-02-11
Title
LearnPress Export Import < 4.1.1 - Missing Authentication to Unauthenticated Migrated Course Deletion
Fixed in
Fixed in 4.1.1
CVSS
4.8 (medium)
Published
2025-07-22
Title
LearnPress Export Import < 4.1.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.1.0
CVSS
6.1 (medium)
Published
2025-07-21
Title
LearnPress Export Import < 4.1.3 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 4.1.3
CVSS
8.1 (high)
Published
2024-11-14
Title
LearnPress Export Import – WordPress extension for LearnPress < 4.0.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.0.5
CVSS
6.1 (medium)
Published
2024-04-16
Title
LearnPress Export Import < 4.0.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.0.4
CVSS
6.1 (medium)
Published
2024-04-05
Title
LearnPress Export Import < 4.0.4 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 4.0.4
CVSS
9.1 (critical)
Published
2023-04-17
Title
LearnPress Export Import < 4.0.3 - Reflected XSS
Fixed in
Fixed in 4.0.3
CVSS
7.1 (high)