Skip to content
Threat Feed

Tag

Data-Deletion

2 briefs RSS
critical advisory

LearnPress WordPress Plugin Unauthorized Data Deletion Vulnerability (CVE-2026-4365)

The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the `delete_question_answer()` function, allowing unauthenticated attackers to delete quiz answer options.

wordpress plugin learnpress data-deletion unauthorized-access
2r 1t 1c
high advisory

OpenEMR Missing Authorization Allows Unauthorized Data Deletion

OpenEMR versions before 8.0.0.3 contain a missing authorization vulnerability in the AJAX deletion endpoint that allows any authenticated user to delete patient data.

openemr authorization-bypass data-deletion
2r 1t