LearnPress vulnerabilities
We track 2 vulnerabilities in LearnPress products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
2vulnerabilities
0critical
2high
0exploited
7.1average CVSS score
Latest LearnPress vulnerabilities
- 7.1 High severity
LearnPress: Improper Neutralization of Input During Web Page Generation
The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, incl
- 7.1 High severity
LearnPress: Improper Neutralization of Input During Web Page Generation
The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML attribute, leading to Reflected Cross-Site Scripting that executes in the browser of a logged-in instructor or administrator who is tricked into o