WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
learnpress
Published
2024-11-21
Title
LearnPress < 4.2.7.2 - Admin+ Stored XSS
Slug
learnpress
Published
2024-12-09
Title
LearnPress – WordPress LMS Plugin < 4.2.7.4 - Course Material Sensitive Information Exposure via REST API
Slug
learnpress
Published
2025-01-24
Title
LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name
Slug
learnpress
Published
2025-01-24
Title
LearnPress < 4.2.7.2 - Authenticated (Subscriber+) Open Redirect
Slug
learnpress
Published
2024-12-24
Title
LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS
Slug
learnpress
Published
2024-12-24
Title
LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS
Slug
learnpress
Published
2025-03-27
Title
LearnPress < 4.2.7.6 - Missing Authorization
Slug
learnpress
Published
2025-10-17
Title
LearnPress – WordPress LMS Plugin < 4.2.9.4 - Missing Authorization to Unauthenticated Database Table Manipulation
Slug
learnpress
Published
2025-11-20
Title
LearnPress – WordPress LMS Plugin < 4.3.0 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure
Slug
learnpress
Published
2025-11-06
Title
LearnPress < 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
learnpress
Published
2025-12-15
Title
LearnPress – WordPress LMS Plugin < 4.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social
Slug
learnpress
Published
2025-12-15
Title
LearnPress – WordPress LMS Plugin < 4.3.2 - Missing Authorization to Unauthenticated Orders Statistics Exposure
Slug
learnpress
Published
2025-11-30
Title
LearnPress < 4.3.0 - Missing Authorization
Slug
learnpress
Published
2026-01-05
Title
LearnPress – WordPress LMS Plugin < 4.3.2.1 - Missing Authentication to Unauthenticated Course Modification
Slug
learnpress
Published
2026-01-06
Title
LearnPress – WordPress LMS Plugin < 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion
Slug
learnpress
Published
2026-01-19
Title
LearnPress – WordPress LMS Plugin < 4.3.2.5 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API
Slug
learnpress-course-review
Published
2026-01-15
Title
LearnPress – Course Review < 4.2.0 - Authenticated (Learnpress student+) Stored Cross-Site Scripting
Slug
learnpress-import-export
Published
2023-04-17
Title
LearnPress Export Import < 4.0.3 - Reflected XSS
Slug
learnpress-import-export
Published
2024-04-05
Title
LearnPress Export Import < 4.0.4 - Authenticated (Administrator+) SQL Injection
Slug
learnpress-import-export
Published
2024-04-16
Title
LearnPress Export Import < 4.0.4 - Reflected Cross-Site Scripting
Slug
learnpress-import-export
Published
2024-11-14
Title
LearnPress Export Import – WordPress extension for LearnPress < 4.0.5 - Reflected Cross-Site Scripting
Slug
learnpress-import-export
Published
2025-07-21
Title
LearnPress Export Import <= 4.0.9 - Unauthenticated Local File Inclusion
Slug
learnpress-import-export
Published
2025-07-22
Title
LearnPress Export Import < 4.1.0 - Reflected Cross-Site Scripting
Slug
learnpress-import-export
Published
2026-02-11
Title
LearnPress Export Import < 4.1.1 - Missing Authentication to Unauthenticated Migrated Course Deletion
Slug
leartes-try-exchange-rates
Published
2025-04-01
Title
Leartes TRY Exchange Rates <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting