Vendor

Rabilal

1 brief RSS

CVE-2026-12153 — WP Learn Manager Plugin Authorization Bypass

The WP Learn Manager plugin for WordPress, in versions up to and including 1.1.8, is vulnerable to an authorization bypass (CVE-2026-12153) allowing unauthenticated attackers to install and activate arbitrary plugins from the WordPress.org repository, potentially leading to full site compromise.

WP Learn Manager <= 1.1.8 wordpress plugin authorization-bypass cve web-application critical-vulnerability

1r 2t 1c 3h ago