WordPress Plugin Vulnerabilities | Page 12 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-08-01

Title

LearnPress < 4.2.6.9 - Cross-Site Request Forgery

Slug

Published

2024-08-01

Title

LearnPress < 4.2.6.9 - Authenticated (Subscriber+) Insecure Direct Object Reference

Slug

Published

2024-08-07

Title

LearnPress – WordPress LMS Plugin < 4.2.6.9.4 - Authenticated (Contributor+) SQL Injection via order Parameter

Slug

Published

2024-09-11

Title

LearnPress – WordPress LMS Plugin < 4.2.7.1 - Unauthenticated SQL Injection via 'c_fields'

Slug

Published

2024-09-11

Title

LearnPress – WordPress LMS Plugin < 4.2.7.1 - Unauthenticated SQL Injection via 'c_only_fields'

Slug

Published

2024-11-21

Title

LearnPress < 4.2.7.2 - Admin+ Stored XSS

Slug

Published

2024-11-21

Title

LearnPress < 4.2.7.2 - Admin+ Stored XSS

Slug

Published

2024-12-09

Title

LearnPress – WordPress LMS Plugin < 4.2.7.4 - Course Material Sensitive Information Exposure via REST API

Slug

Published

2025-01-24

Title

LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name

Slug

Published

2025-01-24

Title

LearnPress < 4.2.7.2 - Authenticated (Subscriber+) Open Redirect

Slug

Published

2024-12-24

Title

LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS

Slug

Published

2024-12-24

Title

LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS

Slug

Published

2025-03-27

Title

LearnPress < 4.2.7.6 - Missing Authorization

Slug

Published

2025-10-17

Title

LearnPress – WordPress LMS Plugin < 4.2.9.4 - Missing Authorization to Unauthenticated Database Table Manipulation

Slug

Published

2025-11-20

Title

LearnPress – WordPress LMS Plugin < 4.3.0 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure

Slug

Published

2025-11-06

Title

LearnPress < 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-12-15

Title

LearnPress – WordPress LMS Plugin < 4.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social

Slug

Published

2025-12-15

Title

LearnPress – WordPress LMS Plugin < 4.3.2 - Missing Authorization to Unauthenticated Orders Statistics Exposure

Slug

Published

2025-11-30

Title

LearnPress < 4.3.0 - Missing Authorization

Slug

Published

2026-01-05

Title

LearnPress – WordPress LMS Plugin < 4.3.2.1 - Missing Authentication to Unauthenticated Course Modification

Slug

Published

2026-01-06

Title

LearnPress – WordPress LMS Plugin < 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion

Slug

learnpress-import-export

Published

2023-04-17

Title

LearnPress Export Import < 4.0.3 - Reflected XSS

Slug

learnpress-import-export

Published

2024-04-05

Title

LearnPress Export Import < 4.0.4 - Authenticated (Administrator+) SQL Injection

Slug

learnpress-import-export

Published

2024-04-16

Title

LearnPress Export Import < 4.0.4 - Reflected Cross-Site Scripting

Slug

learnpress-import-export

Published

2024-11-14

Title

LearnPress Export Import – WordPress extension for LearnPress < 4.0.5 - Reflected Cross-Site Scripting