Advisories · Technology
LearnPress.
Every CVE that names LearnPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.7 Low
LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint
- LearnPress
- Information disclosure
- CVSS 5.3 Medium
LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API
- LearnPress
- Information disclosure
- CVSS 3.7 Low
LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_order
- LearnPress
- Information disclosure
- CVSS 5.3 Medium
LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajax
- LearnPress
- Information disclosure
- CVSS 5.3 Medium
LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax
- LearnPress
- Information disclosure
- CVSS 7.1 High
LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter
- LearnPress
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status Disclosure
- LearnPress
- Information disclosure
- CVSS 6.5 Medium
LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant
- LearnPress
- Information disclosure
- CVSS 2.2 Low
LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature
- LearnPress
- Server-side request forgery (SSRF)
- CVSS 7.1 High
LearnPress < 4.4.1 - Reflected XSS via c_search
- LearnPress
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API
- LearnPress
- Broken access control
- CVSS 4.8 Medium
LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS
- LearnPress
- CVSS 4.8 Medium
LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS
- LearnPress
- CVSS 4.8 Medium
LearnPress < 4.2.7.2 - Admin+ Stored XSS
- LearnPress
- CVSS 4.8 Medium
LearnPress < 4.2.7.2 - Admin+ Stored XSS
- LearnPress
- CVSS 6.1 Medium
LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting
- LearnPress
-
LearnPress < 4.1.5 - Arbitrary Image Renaming
- LearnPress
- CVSS 5.5 Medium
LearnPress – WordPress LMS Plugin <= 4.1.3.1 Authenticated Stored Cross-Site Scripting
- LearnPress
- Cross-site scripting (XSS)