LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

37 known CVEs 70K+ active installs

Scan My Site Free
UNKNOWN: 37
Known Vulnerabilities 37
CVE-2026-8502 UNKNOWN EPSS 0.4%
Published 2026-06-06 · Affected: *
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the 'retur
CVE-2024-11868 UNKNOWN EPSS 0.6%
Published 2024-12-10 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.3 via class-lp-rest-material-controller.php. This
CVE-2024-11868 UNKNOWN EPSS 0.6%
Published 2024-12-10 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.3 via class-lp-rest-material-controller.php. This
CVE-2024-8529 UNKNOWN EPSS 1.0%
Published 2024-09-12 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions up
CVE-2024-8529 UNKNOWN EPSS 1.0%
Published 2024-09-12 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions up
CVE-2024-8522 UNKNOWN EPSS 1.0%
Published 2024-09-12 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up t
CVE-2024-8522 UNKNOWN EPSS 1.0%
Published 2024-09-12 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up t
CVE-2024-6099 UNKNOWN EPSS 0.3%
Published 2024-07-02 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthenticated bypass to user registration in versions up to, and including, 4.2.6.8.1. This is due to missing checks in th
CVE-2024-6099 UNKNOWN EPSS 0.3%
Published 2024-07-02 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthenticated bypass to user registration in versions up to, and including, 4.2.6.8.1. This is due to missing checks in th
CVE-2024-6088 UNKNOWN EPSS 0.5%
Published 2024-07-02 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized user registration due to a missing capability check on the 'register' function in all versions up to, and inclu
CVE-2024-6088 UNKNOWN EPSS 0.5%
Published 2024-07-02 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized user registration due to a missing capability check on the 'register' function in all versions up to, and inclu
CVE-2024-5483 UNKNOWN EPSS 0.6%
Published 2024-06-05 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.6.8 due to incorrect implementation of get_items_pe
CVE-2024-5483 UNKNOWN EPSS 0.6%
Published 2024-06-05 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.6.8 due to incorrect implementation of get_items_pe
CVE-2024-4971 UNKNOWN EPSS 0.2%
Published 2024-05-22 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 4.2.6.6 due to insufficient inpu
CVE-2024-4971 UNKNOWN EPSS 0.2%
Published 2024-05-22 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 4.2.6.6 due to insufficient inpu
CVE-2024-4444 UNKNOWN EPSS 0.5%
Published 2024-05-14 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 4.2.6.5. This is due to missing checks in the 'create_account'
CVE-2024-4444 UNKNOWN EPSS 0.5%
Published 2024-05-14 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 4.2.6.5. This is due to missing checks in the 'create_account'
CVE-2024-4434 UNKNOWN EPSS 1.0%
Published 2024-05-14 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘term_id’ parameter in versions up to, and including, 4.2.6.5 due to insufficient escaping
CVE-2024-4434 UNKNOWN EPSS 1.0%
Published 2024-05-14 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘term_id’ parameter in versions up to, and including, 4.2.6.5 due to insufficient escaping
CVE-2024-4397 UNKNOWN EPSS 0.6%
Published 2024-05-14 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_post_materials' function in versions up to, and incl
CVE-2024-4397 UNKNOWN EPSS 0.6%
Published 2024-05-14 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_post_materials' function in versions up to, and incl
CVE-2024-4277 UNKNOWN EPSS 0.3%
Published 2024-05-14 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layout_html’ parameter in all versions up to, and including, 4.2.6.5 due to insufficien
CVE-2024-4277 UNKNOWN EPSS 0.3%
Published 2024-05-14 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layout_html’ parameter in all versions up to, and including, 4.2.6.5 due to insufficien
CVE-2024-3560 UNKNOWN EPSS 0.2%
Published 2024-04-19 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _id value in all versions up to, and including, 4.2.6.4 due to insufficient input saniti
CVE-2024-3560 UNKNOWN EPSS 0.2%
Published 2024-04-19 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _id value in all versions up to, and including, 4.2.6.4 due to insufficient input saniti
CVE-2024-1463 UNKNOWN EPSS 0.4%
Published 2024-04-09 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Course, Lesson, and Quiz title and content in all versions up to, and including, 4.2.6.3
CVE-2024-1463 UNKNOWN EPSS 0.4%
Published 2024-04-09 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Course, Lesson, and Quiz title and content in all versions up to, and including, 4.2.6.3
CVE-2024-1289 UNKNOWN EPSS 0.3%
Published 2024-04-09 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.6.3 due to missing validation on a user controlle
CVE-2024-1289 UNKNOWN EPSS 0.3%
Published 2024-04-09 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.6.3 due to missing validation on a user controlle
CVE-2024-2115 UNKNOWN EPSS 0.2%
Published 2024-04-05 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.0. This is due to missing or incorrect nonce validation
CVE-2024-2115 UNKNOWN EPSS 0.2%
Published 2024-04-05 · Affected: *
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.0. This is due to missing or incorrect nonce validation
CVE-2023-6634 UNKNOWN EPSS 0.9%
Published 2024-01-11 · Affected: *
The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function. This is due to the plugin making use of the call_user
CVE-2023-6634 UNKNOWN EPSS 0.9%
Published 2024-01-11 · Affected: *
The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function. This is due to the plugin making use of the call_user
CVE-2023-6567 UNKNOWN EPSS 1.0%
Published 2024-01-11 · Affected: *
The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user suppli
CVE-2023-6567 UNKNOWN EPSS 1.0%
Published 2024-01-11 · Affected: *
The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user suppli
CVE-2023-6223 UNKNOWN EPSS 0.3%
Published 2024-01-11 · Affected: *
The LearnPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.5.7 via the /wp-json/lp/v1/profile/course-tab REST API due to missing va
CVE-2023-6223 UNKNOWN EPSS 0.3%
Published 2024-01-11 · Affected: *
The LearnPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.5.7 via the /wp-json/lp/v1/profile/course-tab REST API due to missing va

Is LearnPress – WordPress LMS Plugin for Create and Sell Online Courses running on your site?

A free scan detects your plugins and flags any that match these CVEs.

Scan My Site Free