WordPress Plugin Vulnerabilities | Page 16 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2025-12-15

Title

LearnPress – WordPress LMS Plugin < 4.3.2 - Missing Authorization to Unauthenticated Orders Statistics Exposure

Slug

Published

2025-11-30

Title

LearnPress < 4.3.0 - Missing Authorization

Slug

Published

2026-01-05

Title

LearnPress – WordPress LMS Plugin < 4.3.2.1 - Missing Authentication to Unauthenticated Course Modification

Slug

Published

2026-01-06

Title

LearnPress – WordPress LMS Plugin < 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion

Slug

Published

2026-01-19

Title

LearnPress – WordPress LMS Plugin < 4.3.2.5 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API

Slug

Published

2026-03-11

Title

LearnPress < 4.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering

Slug

Published

2026-03-23

Title

LearnPress < 4.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion

Slug

Published

2026-04-07

Title

LearnPress < 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute

Slug

Published

2026-04-13

Title

LearnPress < 4.3.3 - Unauthenticated Arbitrary Quiz Answer Deletion

Slug

Published

2026-05-13

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.3.6 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter

Slug

Published

2026-06-01

Title

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.3.7 - Reflected Cross-Site Scripting

Slug

Published

2026-05-27

Title

LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API

Slug

Published

2026-06-05

Title

LearnPress < 4.3.7 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parameters

Slug

Published

2026-06-29

Title

LearnPress < 4.4.1 - Reflected XSS via c_search

Slug

Published

2026-06-30

Title

LearnPress < 4.4.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameter

Slug

Published

2026-06-30

Title

LearnPress < 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attribute

Slug

Published

2026-07-16

Title

LearnPress < 4.4.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints

Slug

Published

2026-08-06

Title

LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature

Slug

Published

2026-08-10

Title

LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant

Slug

Published

2026-08-24

Title

LearnPress < 4.4.5 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter

Slug

Published

2026-08-31

Title

LearnPress < 4.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

Slug

learnpress-course-review

Published

2026-01-15

Title

LearnPress – Course Review < 4.2.0 - Authenticated (Learnpress student+) Stored Cross-Site Scripting

Slug

learnpress-import-export

Published

2023-04-17

Title

LearnPress Export Import < 4.0.3 - Reflected XSS

Slug

learnpress-import-export

Published

2024-04-05

Title

LearnPress Export Import < 4.0.4 - Authenticated (Administrator+) SQL Injection

Slug

learnpress-import-export

Published

2024-04-16

Title

LearnPress Export Import < 4.0.4 - Reflected Cross-Site Scripting