WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
learning-management-system
Published
2026-09-10
Title
Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection
Slug
learning-management-system
Published
2026-09-10
Title
Masteriyo LMS 1.14.0 - 3.4.0 - Instructor+ Arbitrary Post Disclosure via IDOR
Slug
learning-management-system
Published
2026-09-10
Title
Masteriyo LMS < 3.4.1 - Instructor+ Stored XSS via Course Highlights
Slug
learning-management-system
Published
2026-09-14
Title
Masteriyo LMS < 3.4.1 - Student+ Course Q&A Disclosure via questions-answers REST Endpoint
Slug
learning-management-system
Published
2026-09-11
Title
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates < 3.4.1 - Unauthenticated PHP Object Injection
Slug
learning-management-system
Published
2026-09-22
Title
Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure
Slug
learning-management-system
Published
2026-09-22
Title
Masteriyo LMS < 3.4.2 - Subscriber+ Arbitrary User Course Progress Disclosure via IDOR
Slug
learning-management-system
Published
2026-10-30
Title
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates < 3.5.0 - Unauthenticated Arbitrary Content Deletion
Slug
learning-management-system-pro
Published
2025-07-01
Title
Masteriyo LMS PRO < 2.20.1 - Unauthenticated Privilege Escalation
Slug
learnpress
Published
2020-03-16
Title
LearnPress < 3.2.6.7 - Privilege Escalation
Slug
learnpress
Published
2020-04-28
Title
LearnPress < 3.2.6.9 - Authenticated Post Creation and Status Modification
Slug
learnpress
Published
2020-04-29
Title
Learnpress < 3.2.6.8 - Authenticated Time Based Blind SQL Injection
Slug
learnpress
Published
2020-04-28
Title
LearnPress < 3.2.6.9 - Privilege Escalation to "LP Instructor"
Slug
learnpress
Published
2020-09-09
Title
LearnPress < 3.2.7.3 - CSRF & XSS
Slug
learnpress
Published
2021-10-18
Title
LearnPress < 4.1.3.2 - Admin+ Stored Cross-Site Scripting
Slug
learnpress
Published
2021-11-09
Title
LearnPress < 4.1.4 - Admin+ SQL Injection
Slug
learnpress
Published
2021-09-20
Title
LearnPress < 4.1.3.1 - Multiple Admin+ Stored Cross-Site Scripting
Slug
learnpress
Published
2022-01-26
Title
LearnPress < 4.1.5 - Arbitrary Image Renaming
Slug
learnpress
Published
2022-03-16
Title
LearnPress < 4.1.6 - Reflected Cross-Site Scripting
Slug
learnpress
Published
2022-06-22
Title
LearnPress < 4.1.6.7 - Reflected Cross-Site Scripting
Slug
learnpress
Published
2022-10-05
Title
LearnPress < 4.1.7.2 - Unauthenticated PHP Object Injection via REST API
Slug
learnpress
Published
2023-01-24
Title
LearnPress Plugin < 4.2.0 - Unauthenticated LFI
Slug
learnpress
Published
2023-01-24
Title
LearnPress Plugin < 4.2.0 - Unauthenticated SQLi
Slug
learnpress
Published
2023-01-24
Title
LearnPress Plugin < 4.2.0 - Subscriber+ SQLi
Slug
learnpress
Published
2023-11-17
Title
LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting