WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
learnpress
Published
2025-11-20
Title
LearnPress – WordPress LMS Plugin < 4.3.0 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure
Slug
learnpress
Published
2025-11-06
Title
LearnPress < 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
learnpress
Published
2025-12-15
Title
LearnPress – WordPress LMS Plugin < 4.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social
Slug
learnpress
Published
2025-12-15
Title
LearnPress – WordPress LMS Plugin < 4.3.2 - Missing Authorization to Unauthenticated Orders Statistics Exposure
Slug
learnpress
Published
2025-11-30
Title
LearnPress < 4.3.0 - Missing Authorization
Slug
learnpress
Published
2026-01-05
Title
LearnPress – WordPress LMS Plugin < 4.3.2.1 - Missing Authentication to Unauthenticated Course Modification
Slug
learnpress
Published
2026-01-06
Title
LearnPress – WordPress LMS Plugin < 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion
Slug
learnpress
Published
2026-01-19
Title
LearnPress – WordPress LMS Plugin < 4.3.2.5 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API
Slug
learnpress
Published
2026-03-11
Title
LearnPress < 4.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering
Slug
learnpress
Published
2026-03-23
Title
LearnPress < 4.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion
Slug
learnpress
Published
2026-04-07
Title
LearnPress < 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute
Slug
learnpress-course-review
Published
2026-01-15
Title
LearnPress – Course Review < 4.2.0 - Authenticated (Learnpress student+) Stored Cross-Site Scripting
Slug
learnpress-import-export
Published
2023-04-17
Title
LearnPress Export Import < 4.0.3 - Reflected XSS
Slug
learnpress-import-export
Published
2024-04-05
Title
LearnPress Export Import < 4.0.4 - Authenticated (Administrator+) SQL Injection
Slug
learnpress-import-export
Published
2024-04-16
Title
LearnPress Export Import < 4.0.4 - Reflected Cross-Site Scripting
Slug
learnpress-import-export
Published
2024-11-14
Title
LearnPress Export Import – WordPress extension for LearnPress < 4.0.5 - Reflected Cross-Site Scripting
Slug
learnpress-import-export
Published
2025-07-21
Title
LearnPress Export Import < 4.1.3 - Unauthenticated Local File Inclusion
Slug
learnpress-import-export
Published
2025-07-22
Title
LearnPress Export Import < 4.1.0 - Reflected Cross-Site Scripting
Slug
learnpress-import-export
Published
2026-02-11
Title
LearnPress Export Import < 4.1.1 - Missing Authentication to Unauthenticated Migrated Course Deletion
Slug
learnpress-sepay-payment
Published
2026-03-16
Title
LearnPress – Sepay Payment < 4.0.1 - Missing Authorization
Slug
leartes-try-exchange-rates
Published
2025-04-01
Title
Leartes TRY Exchange Rates <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
learts-addons
Published
2025-07-08
Title
Learts Addons < 1.7.5 - Unauthenticated SQL Injection
Slug
ledenbeheer-external-connection
Published
2024-12-19
Title
Ledenbeheer < 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leenkme
Published
2016-04-17
Title
leenk.me < 2.6.0 - XSS & CSRF
Slug
leenkme
Published
2024-10-21
Title
leenk.me <= 2.16.0 - Reflected Cross-Site Scripting