CVE-2026-82023: LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors by exploiting a missing ownership check on the question answer insert path. Attackers can supply arbitrary question identifiers during answer insertion, bypassing instructor-boundary restrictions to persistently modify quiz content across courses they do not own.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
LearnPress WordPress Pluginto a version that resolves this vulnerability.Fixed in 4.4.6
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated user with the LearnPress Instructor role can exploit it. The issue affects quiz content owned by other instructors, so it is relevant in deployments with multiple instructor accounts.
What does an attacker need to do to exploit it?
The attacker needs to submit an answer insertion request using an arbitrary quiz question identifier for a question they do not own. No user interaction is required.
What is the impact if exploitation succeeds?
An attacker can persistently add answers to quiz questions in courses owned by other instructors. The provided severity vector indicates an integrity impact only, with no stated confidentiality or availability impact.
Which versions should be remediated?
LearnPress versions before 4.4.6 are affected. Upgrade to 4.4.6 or later.