CVE-2026-12230LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css' Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 09/08/2026 Severity Medium CVE-2026-82024LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles Exploitation status Not known exploited Fix Affected product L LearnPress Published 09/03/2026 Severity Medium CVE-2026-82023LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert Exploitation status Not known exploited Fix Affected product L LearnPress Published 09/03/2026 Severity Medium CVE-2026-77823LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 09/01/2026 Severity Medium CVE-2026-75982LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 08/25/2026 Severity Medium CVE-2026-66458WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product R RealPress Published 08/13/2026 Severity Critical CVE-2026-15464WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 07/24/2026 Severity Medium CVE-2026-15094WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 07/17/2026 Severity Medium CVE-2026-13765LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 07/17/2026 Severity High CVE-2026-11901WP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN Handler Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 07/11/2026 Severity Medium CVE-2026-11392WP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date' and 'check_out_date' Parameters Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 07/10/2026 Severity Medium CVE-2026-12732LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attribute Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 07/01/2026 Severity Medium CVE-2026-11988LearnPress <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameter Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 07/01/2026 Severity Medium CVE-2026-8502LearnPress <= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parameters Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 06/06/2026 Severity Medium CVE-2026-7566LearnPress – Backup & Migration Tool <= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload Exploitation status Not known exploited Fix Affected product L LearnPress – Backup & Migration Tool Published 06/06/2026 Severity Medium CVE-2026-7565LearnPress <= 4.1.4 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'import-user-file' Parameter Exploitation status Not known exploited Fix Affected product L LearnPress – Backup & Migration Tool Published 06/06/2026 Severity Medium CVE-2025-53346WordPress Thim Core Plugin <= 2.3.3 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product T Thim Core Published 06/02/2026 Severity Medium CVE-2025-53345WordPress Thim Core plugin <= 2.3.3 - Arbitrary Plugin Installation vulnerability Exploitation status Not known exploited Fix Affected product T Thim Core Published 06/02/2026 Severity High CVE-2026-48865WordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Published 06/01/2026 Severity High CVE-2026-7648LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 05/14/2026 Severity Medium CVE-2026-4650FundPress <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX Handler Exploitation status Not known exploited Fix Affected product F FundPress – WordPress Donation Plugin Published 05/02/2026 Severity Medium CVE-2026-4365LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 04/14/2026 Severity Critical CVE-2026-4333LearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 04/08/2026 Severity Medium CVE-2026-25002WordPress LearnPress – Sepay Payment plugin <= 4.0.0 - Broken Authentication vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress – Sepay Payment Published 03/25/2026 Severity High CVE-2026-3225LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 03/23/2026 Severity Medium CVE-2026-27065WordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product B BuilderPress Published 03/19/2026 Severity Critical CVE-2026-1870Thim Kit for Elementor <= 1.3.7 - Missing Authorization to Unauthenticated Private Course Disclosure Exploitation status Not known exploited Fix Affected product T Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor Published 03/14/2026 Severity Medium CVE-2026-3226LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 03/12/2026 Severity Medium CVE-2026-1787LearnPress Export Import <= 4.1.0 - Missing Authentication to Unauthenticated Migrated Course Deletion Exploitation status Not known exploited Fix Affected product L LearnPress – Backup & Migration Tool Published 02/21/2026 Severity Medium CVE-2026-27050WordPress RealPress plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product R RealPress Published 02/19/2026 Severity Medium CVE-2026-24361WordPress LearnPress – Course Review plugin <= 4.1.9 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress – Course Review Published 01/22/2026 Severity Medium CVE-2025-14798LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 01/20/2026 Severity Medium CVE-2025-13725Gutenberg Thim Blocks <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read via 'iconSVG' Parameter Exploitation status Not known exploited Fix Affected product T Thim Blocks Published 01/17/2026 Severity Medium CVE-2025-14075WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 01/17/2026 Severity Medium CVE-2025-14802LearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 01/07/2026 Severity Medium CVE-2025-13964LearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 01/06/2026 Severity Medium CVE-2025-53344WordPress Thim Core Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability Exploitation status Not known exploited Fix Affected product T Thim Core Published 01/05/2026 Severity Medium CVE-2025-66054WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Published 12/18/2025 Severity High CVE-2025-13956LearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposure Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 12/16/2025 Severity Medium CVE-2025-14387LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 12/15/2025 Severity Medium CVE-2025-63013WordPress WP Hotel Booking plugin <= 2.2.7 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 12/09/2025 Severity Medium CVE-2025-63012WordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 12/09/2025 Severity Medium CVE-2025-63011WordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 12/09/2025 Severity Medium CVE-2025-67594WordPress Thim Elementor Kit plugin <= 1.3.3 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix Affected product T Thim Elementor Kit Published 12/09/2025 Severity Medium CVE-2025-67573WordPress Sailing theme < 4.4.6 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product S Sailing Published 12/09/2025 Severity Medium CVE-2025-67536WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Published 12/09/2025 Severity Medium CVE-2025-67526WordPress Sailing theme < 4.4.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product S Sailing Published 12/09/2025 Severity High CVE-2025-11368LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 11/21/2025 Severity Medium CVE-2025-60200WordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Export Import Published 11/06/2025 Severity High CVE-2025-54721WordPress Resca theme <= 3.0.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product R Resca Published 11/06/2025 Severity High CVE-2025-64195WordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product E Eduma Published 10/29/2025 Severity High CVE-2025-64194WordPress Eduma theme <= 5.7.6 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Eduma Published 10/29/2025 Severity Medium CVE-2025-60227WordPress WP Pipes plugin <= 1.4.3 - Arbitrary File Deletion vulnerability Exploitation status Not known exploited Fix Affected product W WP Pipes Published 10/22/2025 Severity High CVE-2025-49992WordPress LearnPress Export Import plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Export Import Published 10/22/2025 Severity High CVE-2025-11372LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 10/18/2025 Severity Medium CVE-2025-57987WordPress WP Events Manager Plugin <= 2.2.1 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product W WP Events Manager Published 09/22/2025 Severity Medium CVE-2025-28977WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product W WP Pipes Published 08/20/2025 Severity High CVE-2025-28979WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix Affected product W WP Pipes Published 08/14/2025 Severity High CVE-2025-28982WordPress WP Pipes plugin <= 1.4.3 - SQL Injection Vulnerability Exploitation status Not known exploited Fix Affected product W WP Pipes Published 07/16/2025 Severity Critical CVE-2025-48267WordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion Vulnerability Exploitation status Not known exploited Fix Affected product W WP Pipes Published 06/09/2025 Severity High CVE-2025-48336WordPress Course Builder < 3.6.6 - PHP Object Injection Vulnerability Exploitation status Not known exploited Fix Affected product C Course Builder Published 05/29/2025 Severity Critical CVE-2025-39460WordPress Eduma theme <= 5.6.4 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product E Eduma Published 05/19/2025 Severity Medium CVE-2024-13128LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS Exploitation status Public exploit Fix Affected product L LearnPress Published 05/15/2025 Severity Medium CVE-2024-13127LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS Exploitation status Public exploit Fix Affected product L LearnPress Published 05/15/2025 Severity Medium CVE-2025-47664WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability Exploitation status Not known exploited Fix Affected product W WP Pipes Published 05/07/2025 Severity Medium CVE-2025-47448WordPress WP Hotel Booking plugin <= 2.1.9 - Cross Site Request Forgery (CSRF) Vulnerability Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 05/07/2025 Severity Medium CVE-2025-39470WordPress Ivy School theme <= 1.6.0 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix Affected product I Ivy School Published 04/18/2025 Severity High CVE-2025-22739WordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Published 03/27/2025 Severity Medium CVE-2025-24740WordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Published 01/27/2025 Severity Medium CVE-2025-24601WordPress FundPress plugin <= 2.0.6 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product F FundPress Published 01/27/2025 Severity Critical CVE-2024-13599LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 01/25/2025 Severity Medium CVE-2025-24725WordPress Thim Elementor Kit Plugin <= 1.2.8 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T Thim Elementor Kit Published 01/24/2025 Severity Medium CVE-2024-13447WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 01/22/2025 Severity Medium CVE-2024-12370WP Hotel Booking <= 2.1.5 - Missing Authorization Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 01/17/2025 Severity Medium CVE-2025-22312WordPress Thim Elementor Kit plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T Thim Elementor Kit Published 01/07/2025 Severity Medium CVE-2024-9881LearnPress < 4.2.7.2 - Admin+ Stored XSS Exploitation status Public exploit Fix Affected product L LearnPress Published 12/12/2024 Severity Medium CVE-2024-10010LearnPress < 4.2.7.2 - Admin+ Stored XSS Exploitation status Public exploit Fix Affected product L LearnPress Published 12/12/2024 Severity Medium CVE-2024-12283WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter Exploitation status Not known exploited Fix Affected product W WP Pipes Published 12/11/2024 Severity Medium CVE-2024-11868LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 12/10/2024 Severity Medium CVE-2024-9609LearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site Scripting Exploitation status Not known exploited Fix Affected product L LearnPress – Backup & Migration Tool Published 11/15/2024 Severity Medium CVE-2024-51582WordPress WP Hotel Booking plugin <= 2.2.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 11/04/2024 Severity High CVE-2024-7855WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 10/02/2024 Severity High CVE-2024-8522LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields' Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 09/12/2024 Severity Critical CVE-2024-8529LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields' Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 09/12/2024 Severity Critical CVE-2024-7717WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection Exploitation status Not known exploited Fix Affected product W WP Events Manager Published 08/31/2024 Severity High CVE-2024-39641WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Published 08/26/2024 Severity Medium CVE-2024-39642WordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Published 08/13/2024 Severity Medium CVE-2024-7548LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 08/08/2024 Severity High CVE-2024-6589LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 07/25/2024 Severity High CVE-2024-6099LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 07/02/2024 Severity Medium CVE-2024-6088LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration Bypass Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 07/02/2024 Severity Medium CVE-2024-3605WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection Exploitation status Not known exploited Fix Affected product W WP Hotel Booking Published 06/20/2024 Severity Critical CVE-2023-36515WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product L LearnPress Published 06/19/2024 Severity High CVE-2023-36516WordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability Exploitation status Public exploit Fix Affected product L LearnPress Published 06/19/2024 Severity High CVE-2024-35697WordPress Eduma theme <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Eduma Published 06/08/2024 Severity High CVE-2024-5483LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 06/05/2024 Severity Medium CVE-2024-4971LearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 05/22/2024 Severity Medium CVE-2024-4329Thim Elementor Kit <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter Exploitation status Not known exploited Fix Affected product T Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor Published 05/11/2024 Severity Medium CVE-2024-4277LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameter Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 05/10/2024 Severity Medium CVE-2024-4444LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration Exploitation status Not known exploited Fix Affected product L LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Published 05/10/2024 Severity Medium 
