CVE-2025-11368: LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 4.2.9.4. This is due to missing capability checks in the REST endpoint /wp-json/lp/v1/loadcontentviaajax which allows arbitrary callback execution of admin-only template methods. This makes it possible for unauthenticated attackers to retrieve admin curriculum HTML, quiz questions with correct answers, course materials, and other sensitive educational content via the REST API endpoint granted they can supply valid numeric IDs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11368?
CVE-2025-11368 has a high severity rating due to its potential for sensitive information disclosure.
How do I fix CVE-2025-11368?
To remediate CVE-2025-11368, update the LearnPress – WordPress LMS Plugin to the latest version beyond 4.2.9.4.
What versions are affected by CVE-2025-11368?
CVE-2025-11368 affects all versions of the LearnPress – WordPress LMS Plugin up to and including 4.2.9.4.
Can CVE-2025-11368 lead to data breaches?
Yes, CVE-2025-11368 can potentially lead to data breaches by allowing unauthorized access to sensitive information.
What causes CVE-2025-11368?
CVE-2025-11368 is caused by missing capability checks in the REST endpoint of the LearnPress – WordPress LMS Plugin.