Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:learnpress:learnpress:*:*:*:*:*:wordpress:*:*

1 brief RSS
critical advisory

CVE-2026-104736: PHP Object Injection in LearnPress WordPress Plugin

The LearnPress plugin for WordPress is vulnerable to unauthenticated PHP Object Injection via the 'checkout-email' parameter, allowing remote attackers to trigger insecure deserialization.

LearnPress web-vulnerability php-deserialization wordpress cve-2026-104736
1r 2t 1c