WordPress Plugin Vulnerabilities | Page 18 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-08-06

Title

LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature

Slug

Published

2026-08-10

Title

LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant

Slug

Published

2026-09-07

Title

LearnPress < 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'

Slug

Published

2026-08-24

Title

LearnPress < 4.4.5 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter

Slug

Published

2026-09-03

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.6 - Missing Authorization

Slug

Published

2026-09-03

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.6 - Authenticated (Instructor+) Stored Cross-Site Scripting

Slug

Published

2026-08-31

Title

LearnPress < 4.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

Slug

Published

2026-10-02

Title

LearnPress < 4.4.8 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter

Slug

Published

2026-10-02

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.11 - Missing Authorization

Slug

Published

2026-10-05

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.9.1 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-10-02

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.9.1 - Unauthenticated Insecure Direct Object Reference

Slug

Published

2026-09-14

Title

LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API

Slug

Published

2026-09-14

Title

LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_order

Slug

Published

2026-09-14

Title

LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajax

Slug

Published

2026-09-14

Title

LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter

Slug

Published

2026-10-05

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.10 - Authenticated (Instructor+) Stored Cross-Site Scripting

Slug

Published

2026-09-14

Title

LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax

Slug

Published

2026-09-15

Title

LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint

Slug

Published

2026-10-19

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.11 - Missing Authorization

Slug

Published

2026-10-20

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.11 - Missing Authorization

Slug

Published

2026-09-30

Title

LearnPress < 4.4.9 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter

Slug

Published

2026-10-26

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.12 - Missing Authorization

Slug

Published

2026-10-26

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.12 - Missing Authorization

Slug

Published

2026-10-20

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.10 - Authenticated (Custom+) Insecure Direct Object Reference

Slug

Published

2026-10-27

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.12 - Missing Authorization