Live › vulnerability › CVE-2026-110363
Go to dashboardLearnPress, a WordPress learning-management plugin by ThimPress, has a missing authorization check in versions through 4.4.10. An attacker with access to the site may be able to perform actions or read content that their role should not allow.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the LearnPress WordPress plugin at version 4.4.10 or earlier are in scope. Sites without LearnPress, or running a newer release, can skip it. The sources do not say which roles or endpoints are reachable without authentication.
No product ranges from the sources yet.
wp plugin get learnpress --field=version4.4.10; sites at or below that version are in the reported range4.4.10 once the vendor release is confirmed; the sources do not name the fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.
This page as .md · .json · in your agent: get_signal("CVE-2026-110363")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.