Vendor
high
advisory
CVE-2026-93882 - IDOR in LearnPress WordPress LMS Plugin
1 rule 1 TTP 1 CVEAn unauthenticated IDOR vulnerability in the LearnPress WordPress plugin allows unauthorized access to private course materials by manipulating the course and item identifiers in AJAX requests.
LearnPress
idor
wordpress
lms
web-application-vulnerability
1r
1t
1c
high
advisory
Sensitive Information Exposure in LearnPress WordPress Plugin (CVE-2026-13765)
1 rule 2 TTPs 1 CVEAn unauthenticated sensitive information exposure vulnerability (CVE-2026-13765) in the LearnPress - WordPress LMS Plugin for Create and Sell Online Courses, versions up to 4.4.1, allows attackers to extract quiz answers, options, explanations, and question content, including for paid courses.
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.1
wordpress
plugin
vulnerability
information-exposure
web
1r
2t
1c