CVE-2026-13765: LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.1 via the checkanswer. This makes it possible for unauthenticated attackers to extract the correct-answer markers, full option lists, explanations, and question content for any quiz question on the site — including questions belonging to paid courses the attacker is not enrolled in.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13765?
The severity of CVE-2026-13765 is rated high with a score of 7.5.
What type of vulnerability is CVE-2026-13765?
CVE-2026-13765 is a Sensitive Information Exposure vulnerability in the LearnPress plugin.
How do I fix CVE-2026-13765?
To fix CVE-2026-13765, update the LearnPress plugin to a version higher than 4.4.1.
What can an attacker do with CVE-2026-13765?
An attacker can exploit CVE-2026-13765 to extract sensitive information, specifically correct-answer markers, without authentication.
Which versions of LearnPress are affected by CVE-2026-13765?
All versions of LearnPress up to and including 4.4.1 are affected by CVE-2026-13765.