WordPress Plugin Vulnerabilities | Page 12 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

learning-management-system

Published

2026-03-25

Title

Masteriyo LMS < 2.1.7 - Subscriber+ Privilege Escalation

Slug

learning-management-system

Published

2026-04-07

Title

Masteriyo LMS < 2.1.8 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint

Slug

learning-management-system

Published

2026-04-08

Title

Masteriyo LMS – Online Course Builder for eLearning, LMS & Education < 2.1.6 - Missing Authorization

Slug

learning-management-system-pro

Published

2025-07-01

Title

Masteriyo LMS PRO < 2.20.1 - Unauthenticated Privilege Escalation

Slug

Published

2020-03-16

Title

LearnPress < 3.2.6.7 - Privilege Escalation

Slug

Published

2020-04-28

Title

LearnPress < 3.2.6.9 - Authenticated Post Creation and Status Modification

Slug

Published

2020-04-29

Title

Learnpress < 3.2.6.8 - Authenticated Time Based Blind SQL Injection

Slug

Published

2020-04-28

Title

LearnPress < 3.2.6.9 - Privilege Escalation to "LP Instructor"

Slug

Published

2020-09-09

Title

LearnPress < 3.2.7.3 - CSRF & XSS

Slug

Published

2021-10-18

Title

LearnPress < 4.1.3.2 - Admin+ Stored Cross-Site Scripting

Slug

Published

2021-11-09

Title

LearnPress < 4.1.4 - Admin+ SQL Injection

Slug

Published

2021-09-20

Title

LearnPress < 4.1.3.1 - Multiple Admin+ Stored Cross-Site Scripting

Slug

Published

2022-01-26

Title

LearnPress < 4.1.5 - Arbitrary Image Renaming

Slug

Published

2022-03-16

Title

LearnPress < 4.1.6 - Reflected Cross-Site Scripting

Slug

Published

2022-06-22

Title

LearnPress < 4.1.6.7 - Reflected Cross-Site Scripting

Slug

Published

2022-10-05

Title

LearnPress < 4.1.7.2 - Unauthenticated PHP Object Injection via REST API

Slug

Published

2023-01-24

Title

LearnPress Plugin < 4.2.0 - Unauthenticated LFI

Slug

Published

2023-01-24

Title

LearnPress Plugin < 4.2.0 - Unauthenticated SQLi

Slug

Published

2023-01-24

Title

LearnPress Plugin < 4.2.0 - Subscriber+ SQLi

Slug

Published

2023-11-17

Title

LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting

Slug

Published

2024-01-02

Title

LearnPress < 4.2.5.8 - Unauthenticated SQLi

Slug

Published

2024-01-02

Title

LearnPress < 4.2.5.8 - Subscriber+ Arbitrary Course Progress Disclosure

Slug

Published

2024-01-03

Title

LearnPress < 4.2.5.8 - Unauthenticated Command Injection

Slug

Published

2024-04-04

Title

LearnPress < 4.2.6.4 - Authenticated(LP Instructor+) Stored Cross-Site Scripting

Slug

Published

2024-04-04

Title

LearnPress < 4.2.6.4 - Insecure Direct Object Reference