- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, LearnPress recorded 13 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of LearnPress and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-52713WordPress LearnPress plugin <= 4.4.12 - Broken Access Control vulnerabilityCVE-2026-42690WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerabilityCVE-2026-115599WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerabilityCVE-2026-115598WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerabilityCVE-2026-115597WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-52713WordPress LearnPress plugin <= 4.4.12 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-42690WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published10/29/2026 | SeverityMedium |
|---|
CVE-2026-115599WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published10/29/2026 | SeverityHigh |
|---|
CVE-2026-115598WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published10/26/2026 | SeverityMedium |
|---|
CVE-2026-115597WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published10/26/2026 | SeverityMedium |
|---|
CVE-2026-113353LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers | Exploitation statusNot exploited | FixYes | Published10/20/2026 | SeverityMedium |
|---|
CVE-2026-110363WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published10/19/2026 | SeverityMedium |
|---|
CVE-2026-104670WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published10/06/2026 | SeverityHigh |
|---|
CVE-2026-105397LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-39717WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published10/02/2026 | SeverityMedium |
|---|
CVE-2026-104403WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Published10/02/2026 | SeverityMedium |
|---|
CVE-2026-82024LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles | Exploitation statusNot exploited | FixYes | Published09/03/2026 | SeverityMedium |
|---|
CVE-2026-82023LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert | Exploitation statusNot exploited | FixYes | Published09/03/2026 | SeverityMedium |
|---|
CVE-2026-48865WordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityHigh |
|---|
CVE-2025-66054WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published12/18/2025 | SeverityHigh |
|---|
CVE-2025-67536WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published12/09/2025 | SeverityMedium |
|---|
CVE-2025-22739WordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published03/27/2025 | SeverityMedium |
|---|
CVE-2025-24740WordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability | Exploitation statusNot exploited | FixYes | Published01/27/2025 | SeverityMedium |
|---|
CVE-2024-39641WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Published08/26/2024 | SeverityMedium |
|---|
CVE-2024-39642WordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Published08/13/2024 | SeverityMedium |
|---|
CVE-2023-36516WordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability | Exploitation statusActively exploited | FixYes | Published06/19/2024 | SeverityHigh |
|---|
CVE-2023-36515WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published06/19/2024 | SeverityHigh |
|---|
CVE-2018-16175CVE-2018-16175 | Exploitation statusNot confirmed | FixNo | Published01/09/2019 | SeverityUnknown |
|---|
CVE-2018-16174CVE-2018-16174 | Exploitation statusNot confirmed | FixNo | Published01/09/2019 | SeverityUnknown |
|---|
CVE-2018-16173CVE-2018-16173 | Exploitation statusNot confirmed | FixNo | Published01/09/2019 | SeverityUnknown |
|---|
25 Results | Page 1 of 1