CVE-2026-115597: WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/learnpressto a version that resolves this vulnerability.Fixed in 4.4.12
Event History
Frequently Asked Questions
Which LearnPress versions are affected?
The issue affects LearnPress through version 4.4.11. The available data does not identify a fixed version.
What access does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation is network-accessible, requires no user interaction, and has low attack complexity.
What is the potential impact if exploitation succeeds?
The vulnerability can result in low-impact confidentiality and integrity effects. The CVSS vector indicates no availability impact.