Unknown LearnPress vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20241
3. 20254
4. 202611

Newest CVEs

• CVE-2026-86446

  LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint

  Unknown · LearnPress

  Low3.7
• CVE-2026-86449

  LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API

  Unknown · LearnPress

  Medium5.3
• CVE-2026-86448

  LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_order

  Unknown · LearnPress

  Low3.7
• CVE-2026-86447

  LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajax

  Unknown · LearnPress

  Medium5.3
• CVE-2026-86445

  LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax

  Unknown · LearnPress

  Medium5.3
• CVE-2026-86444

  LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter

  Unknown · LearnPress

  High7.1
• CVE-2026-78125

  LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status Disclosure

  Unknown · LearnPress

  Medium5.3
• CVE-2026-12976

  LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant

  Unknown · LearnPress

  Medium6.5
• CVE-2026-12971

  LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature

  Unknown · LearnPress

  Low2.2
• CVE-2026-12970

  LearnPress < 4.4.1 - Reflected XSS via c_search

  Unknown · LearnPress

  High7.1