CVE-2025-14798
LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.2.4 via the get_item_permissions_check function. This makes it possible for unauthenticated attackers to extract sensitive data including user first names and last names. Other information such as social profile links and enrollment are also included.
| CWE | CWE-862 |
| Vendor | thimpress |
| Product | learnpress – wordpress lms plugin for create and sell online courses |
| Published | Jan 20, 2026 |
| Last Updated | Apr 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for thimpress learnpress – wordpress lms plugin for create and sell online courses
Be the first to know when new medium vulnerabilities affecting thimpress learnpress – wordpress lms plugin for create and sell online courses are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
thimpress / LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
0 ≤ 4.3.2.4
References
wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/6fb00ce4-aa82-4479-b7f6-79e7bde098c1?source=cve plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/learnpress/tags/4.3.2.1/inc/jwt/rest-api/version1/class-lp-rest-users-v1-controller.php#L134 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/learnpress/tags/4.3.2.1/inc/jwt/rest-api/version1/class-lp-rest-users-v1-controller.php#L35
Credits
andrea bocchetti