Live › vulnerability › CVE-2026-115598
Go to dashboardLearnPress, a WordPress learning-management plugin by ThimPress, has a missing authorization check in versions up to 4.4.11. A user may be able to perform actions or reach data that their role should not allow.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 17:31 UTC. All times on this page are UTC.
Sites running LearnPress 4.4.11 or earlier on WordPress are in scope. The sources do not say which roles or endpoints are reachable, so the exact exposure is unknown. Sites without LearnPress installed can skip it.
No product ranges from the sources yet.
wp plugin get learnpress --field=version4.4.11 once the vendor publishes a fixed release (unknown which version is fixed)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
This page as .md · .json · in your agent: get_signal("CVE-2026-115598")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.