CVE-2026-110363: WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
Published Oct 19, 2026
·Updated
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.
Affected Software
1 affected component
thimpress LearnPress<=4.4.10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress LearnPress pluginto a version that resolves this vulnerability.Fixed in 4.4.11
Event History
Oct 19, 2026
CVE Published
via MITRE·12:21 PM
Data Sourced
via MITRE·12:21 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability requires low-level privileges (PR:L). It is remotely reachable and does not require user interaction.
2
What impact could successful exploitation have?
Successful exploitation may allow unauthorized access-control actions that affect confidentiality and integrity at a low level. No availability impact is indicated.
3
Which LearnPress versions are affected?
LearnPress versions through 4.4.10 are affected. The available data does not identify a fixed version.