Live › vulnerability › CVE-2026-115599
LearnPress, a WordPress plugin for running online courses, has a missing authorization check that lets requests bypass intended access control. The sources do not say which data or actions an attacker can reach through it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 11:24 UTC. All times on this page are UTC.
Sites running the LearnPress plugin at version 4.4.11 or earlier, typically WordPress sites that sell or host online courses. The sources do not say whether the flaw needs a logged-in account or a particular course setting, so the exposure is unknown.
No product ranges from the sources yet.
learnpress plugin header.4.4.11 are affected; move to a later release (the exact fixed version is unknown).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
This page as .md · .json · in your agent: get_signal("CVE-2026-115599")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.