Cpe:2.3:a:thimpress:learnpress:*:*:*:*:*:wordpress:*:*

The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting via the 'quantity' and 'order_comments' parameters, allowing script injection by unauthenticated or low-privileged users.