agentprime: thimpress-learnpress-wordpress-lms-plugin-for-create-and-sell-online-coursesEvery new CVE for thimpress-learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses.https://agentprime.io/CVE-2026-107744: LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Actionhttps://agentprime.io/advisories/CVE-2026-107744/https://agentprime.io/advisories/CVE-2026-107744/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 03:43:30 GMTCVECVE-2026-104736: LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameterhttps://agentprime.io/advisories/CVE-2026-104736/https://agentprime.io/advisories/CVE-2026-104736/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 03:43:28 GMTCVEcriticalCVE-2026-109208: LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parametershttps://agentprime.io/advisories/CVE-2026-109208/https://agentprime.io/advisories/CVE-2026-109208/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 02:31:06 GMTCVECVE-2026-92538: LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameterhttps://agentprime.io/advisories/CVE-2026-92538/https://agentprime.io/advisories/CVE-2026-92538/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 03:25:45 GMTCVECVE-2026-93882: LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameterhttps://agentprime.io/advisories/CVE-2026-93882/https://agentprime.io/advisories/CVE-2026-93882/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 07:40:22 GMTCVECVE-2026-12230: LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'https://agentprime.io/advisories/CVE-2026-12230/https://agentprime.io/advisories/CVE-2026-12230/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 11:30:00 GMTCVECVE-2026-77823: LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameterhttps://agentprime.io/advisories/CVE-2026-77823/https://agentprime.io/advisories/CVE-2026-77823/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 04:27:52 GMTCVECVE-2026-75982: LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameterhttps://agentprime.io/advisories/CVE-2026-75982/https://agentprime.io/advisories/CVE-2026-75982/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 02:26:48 GMTCVECVE-2026-13765: LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpointshttps://agentprime.io/advisories/CVE-2026-13765/https://agentprime.io/advisories/CVE-2026-13765/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 03:43:42 GMTCVECVE-2026-12732: LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-12732/https://agentprime.io/advisories/CVE-2026-12732/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 07:53:36 GMTCVECVE-2026-11988: LearnPress <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameterhttps://agentprime.io/advisories/CVE-2026-11988/https://agentprime.io/advisories/CVE-2026-11988/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 04:32:27 GMTCVECVE-2026-8502: LearnPress <= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parametershttps://agentprime.io/advisories/CVE-2026-8502/https://agentprime.io/advisories/CVE-2026-8502/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 06 Jun 2026 02:28:36 GMTCVECVE-2026-7648: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameterhttps://agentprime.io/advisories/CVE-2026-7648/https://agentprime.io/advisories/CVE-2026-7648/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 03:27:14 GMTCVECVE-2026-4365: LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletionhttps://agentprime.io/advisories/CVE-2026-4365/https://agentprime.io/advisories/CVE-2026-4365/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Apr 2026 01:24:59 GMTCVEcriticalCVE-2026-4333: LearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-4333/https://agentprime.io/advisories/CVE-2026-4333/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 03:36:07 GMTCVECVE-2026-3225: LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletionhttps://agentprime.io/advisories/CVE-2026-3225/https://agentprime.io/advisories/CVE-2026-3225/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Mar 2026 22:25:40 GMTCVECVE-2026-3226: LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggeringhttps://agentprime.io/advisories/CVE-2026-3226/https://agentprime.io/advisories/CVE-2026-3226/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Mar 2026 02:22:37 GMTCVECVE-2025-14798: LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST APIhttps://agentprime.io/advisories/CVE-2025-14798/https://agentprime.io/advisories/CVE-2025-14798/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Jan 2026 03:25:17 GMTCVECVE-2025-14802: LearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletionhttps://agentprime.io/advisories/CVE-2025-14802/https://agentprime.io/advisories/CVE-2025-14802/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jan 2026 07:17:33 GMTCVECVE-2025-13964: LearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modificationhttps://agentprime.io/advisories/CVE-2025-13964/https://agentprime.io/advisories/CVE-2025-13964/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Jan 2026 08:21:49 GMTCVECVE-2025-13956: LearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposurehttps://agentprime.io/advisories/CVE-2025-13956/https://agentprime.io/advisories/CVE-2025-13956/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Dec 2025 04:31:35 GMTCVECVE-2025-14387: LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_socialhttps://agentprime.io/advisories/CVE-2025-14387/https://agentprime.io/advisories/CVE-2025-14387/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Dec 2025 15:30:54 GMTCVECVE-2025-11368: LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposurehttps://agentprime.io/advisories/CVE-2025-11368/https://agentprime.io/advisories/CVE-2025-11368/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 05:32:04 GMTCVECVE-2025-11372: LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulationhttps://agentprime.io/advisories/CVE-2025-11372/https://agentprime.io/advisories/CVE-2025-11372/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 18 Oct 2025 06:42:48 GMTCVECVE-2024-13599: LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Namehttps://agentprime.io/advisories/CVE-2024-13599/https://agentprime.io/advisories/CVE-2024-13599/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Jan 2025 07:24:15 GMTCVECVE-2024-11868: LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST APIhttps://agentprime.io/advisories/CVE-2024-11868/https://agentprime.io/advisories/CVE-2024-11868/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Dec 2024 12:24:59 GMTCVECVE-2024-8522: LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'https://agentprime.io/advisories/CVE-2024-8522/https://agentprime.io/advisories/CVE-2024-8522/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.63 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Sep 2024 08:30:46 GMTCVEcriticalCVE-2024-8529: LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'https://agentprime.io/advisories/CVE-2024-8529/https://agentprime.io/advisories/CVE-2024-8529/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.12 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Sep 2024 08:30:46 GMTCVEcriticalCVE-2024-7548: LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameterhttps://agentprime.io/advisories/CVE-2024-7548/https://agentprime.io/advisories/CVE-2024-7548/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Aug 2024 05:31:45 GMTCVECVE-2024-6589: LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusionhttps://agentprime.io/advisories/CVE-2024-6589/https://agentprime.io/advisories/CVE-2024-6589/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jul 2024 10:59:51 GMTCVECVE-2024-6099: LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registrationhttps://agentprime.io/advisories/CVE-2024-6099/https://agentprime.io/advisories/CVE-2024-6099/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jul 2024 11:01:35 GMTCVECVE-2024-6088: LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration Bypasshttps://agentprime.io/advisories/CVE-2024-6088/https://agentprime.io/advisories/CVE-2024-6088/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jul 2024 11:01:35 GMTCVECVE-2024-5483: LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON APIhttps://agentprime.io/advisories/CVE-2024-5483/https://agentprime.io/advisories/CVE-2024-5483/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jun 2024 02:34:31 GMTCVECVE-2024-4971: LearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameterhttps://agentprime.io/advisories/CVE-2024-4971/https://agentprime.io/advisories/CVE-2024-4971/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 May 2024 05:32:46 GMTCVECVE-2024-4277: LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameterhttps://agentprime.io/advisories/CVE-2024-4277/https://agentprime.io/advisories/CVE-2024-4277/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 May 2024 09:32:08 GMTCVECVE-2024-4444: LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registrationhttps://agentprime.io/advisories/CVE-2024-4444/https://agentprime.io/advisories/CVE-2024-4444/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 May 2024 08:32:34 GMTCVECVE-2024-4434: LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injectionhttps://agentprime.io/advisories/CVE-2024-4434/https://agentprime.io/advisories/CVE-2024-4434/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.37 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 May 2024 08:32:33 GMTCVEcriticalCVE-2024-4397: LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2024-4397/https://agentprime.io/advisories/CVE-2024-4397/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 May 2024 20:03:41 GMTCVECVE-2024-3560: LearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-3560/https://agentprime.io/advisories/CVE-2024-3560/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:57:09 GMTCVECVE-2024-1463: LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-1463/https://agentprime.io/advisories/CVE-2024-1463/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:12 GMTCVECVE-2024-1289: LearnPress <= 4.2.6.3 - Insecure Direct Object Referencehttps://agentprime.io/advisories/CVE-2024-1289/https://agentprime.io/advisories/CVE-2024-1289/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:58:31 GMTCVECVE-2024-2115: LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalationhttps://agentprime.io/advisories/CVE-2024-2115/https://agentprime.io/advisories/CVE-2024-2115/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Apr 2024 07:34:35 GMTCVECVE-2023-6567: LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_byhttps://agentprime.io/advisories/CVE-2023-6567/https://agentprime.io/advisories/CVE-2023-6567/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.51 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 08:32:37 GMTCVEcriticalCVE-2023-6634: LearnPress <= 4.2.5.7 - Command Injectionhttps://agentprime.io/advisories/CVE-2023-6634/https://agentprime.io/advisories/CVE-2023-6634/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 08:32:28 GMTCVECVE-2023-6223: LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosurehttps://agentprime.io/advisories/CVE-2023-6223/https://agentprime.io/advisories/CVE-2023-6223/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 06:49:32 GMTCVE