These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10. This vulnerability allows authenticated attackers, with subscriber-level access and above, to enumerate the complete site user roster and extract the full email address of any WordPress account, including administrator accounts.
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection. This vulnerability allows unauthenticated attackers to inject PHP objects via the 'checkout-email' request parameter during the checkout AJAX action. The vulnerability exists in versions up to, and including, 4.4.10. The vulnerability is caused by the deserialization of untrusted input from the 'checkout-email' request parameter, w [truncated]
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (REST) / order_comments (checkout)' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts, which execute w [truncated]
The LearnPress WordPress Plugin through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject scripts via quiz question hint and explanation fields. This vulnerability can lead to potential script injection by authenticated instructors, execution of injected scripts in the session of every student taking the quiz, and possible disruption of quiz funct [truncated]
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter in all versions up to, and including, 4.4.7 due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can succes [truncated]
A vulnerability in ThimPress LearnPress allows for authorization bypass through user-controlled keys, potentially leading to security level exploitation. This issue affects LearnPress versions from n/a through 4.4.9. The vulnerability can lead to security breaches if not properly addressed. Defenders should be aware of the potential risks and take necessary actions to prevent exploitation. The CVE record [truncated]
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference. This vulnerability allows unauthenticated attackers to read and download course-material files belonging to lessons in paid or enrollment-required courses, provided any single course on the site has 'No Required Enroll' enabled and owns at least one material file.
The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpress_create_page AJAX action. This vulnerability allows authenticated attackers with Editor-level access to update arbitrary WordPress options, potentially enabling actions such as flipping users_can_register to a truthy value or corrupting act [truncated]
CVE-2026-57397 is a high-severity unauthenticated Cross Site Scripting (XSS) vulnerability in Coaching theme versions <= 3.9.2. Defenders should assess exposure, prioritize remediation, and verify fixes.
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'check_in_date' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as c [truncated]
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.1 via the check_answer. This makes it possible for unauthenticated attackers to extract the correct-answer markers, full option lists, explanations, and question content for any quiz question on the site — including question [truncated]
The WP Hotel Booking plugin for WordPress has a vulnerability in versions up to and including 2.3.1. This vulnerability is due to insufficient verification of data authenticity in the `web_hook_process_paypal_standard()` IPN handler. The handler selects its PayPal validation endpoint from an attacker-controlled parameter, allowing unauthenticated attackers to mark arbitrary hotel bookings as fully paid. T [truncated]
The WP Hotel Booking plugin for WordPress has a Reflected Cross-Site Scripting vulnerability. This vulnerability allows unauthenticated users to inject arbitrary web scripts via the 'check_in_date' and 'check_out_date' parameters in all versions up to, and including, 2.3.1. The vulnerability has a CVSS score of 6.1 and a severity of MEDIUM. Users of the WP Hotel Booking plugin for WordPress should be awar [truncated]
The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.4 via deserialization of untrusted input. This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact un [truncated]
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'skin' attribute of the learn_press_courses shortcode in all versions up to and including 4.3.3. This is due to insufficient input sanitization and output escaping on the 'skin' shortcode attribute. The attribute value is used directly in an sprintf() call that generates HTML (class attribute an [truncated]
CVE-2025-14802 LearnPress Plugin File Deletion Vulnerability. The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to unauthorized file deletion in versions up to, and including, 4.3.2.2 via the /wp-json/lp/v1/material/{file_id} REST API endpoint. This issue arises from a parameter mismatch between the DELETE operation and authorization check. Authenticated attackers with teacher-level access [truncated]
A Cross-Site Request Forgery (CSRF) vulnerability exists in ThimPress Thim Core, affecting versions from n/a through 2.3.3. This issue has a CVSS score of 4.3 and is classified as MEDIUM severity. The CVE record was published on 2026-01-05T17:15:45.737Z and was last modified on 2026-09-30T22:10:00.273Z. Defenders should verify the presence of this vulnerability in their inventory and assess the exposure o [truncated]