Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: ThimPress LearnPress 4.4.6 Clear all filters
TI-2026-56612 CVE-2026-82024 · GHSA-7c9g-vc8f-3266

LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles

Priority LOW 23

LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers with the Instructor role to inject persistent malicious payloads by submitting unsanitized…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-09-03 Fixed in 4.4.6 CWE-79
TI-2026-56611 CVE-2026-82023 · GHSA-f3vp-h5hg-9gmp

LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert

Priority LOW 24

LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00295 Published 2026-09-03 Fixed in 4.4.6 CWE-863