Live › vulnerability › CVE-2026-115597
Go to dashboardLearnPress, a WordPress learning-management plugin by ThimPress, has a missing authorization check in versions through 4.4.11. A user may be able to perform actions their role should not allow.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 17:31 UTC. All times on this page are UTC.
Sites running LearnPress 4.4.11 or earlier on WordPress. The sources do not say which roles or endpoints are reachable, so the exact exposure is unknown. Sites that do not run LearnPress can skip it.
No product ranges from the sources yet.
wp plugin get learnpress --field=version4.4.11, the first fixed version is unknown from the sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
This page as .md · .json · in your agent: get_signal("CVE-2026-115597")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.