CVE-2026-113353
LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another object's id parameter to alter courses, change quiz answers, and trash questions.
| CWE | CWE-639 |
| Vendor | thimpress |
| Product | learnpress |
| Published | Oct 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for thimpress learnpress
Be the first to know when new medium vulnerabilities affecting thimpress learnpress are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
Affected Versions
ThimPress / LearnPress
0 < 4.4.10
References
github.com: https://github.com/LearnPress/learnpress/commit/77087dcdc0e974e8d0844453b4071189fc2c70d2 plugins.svn.wordpress.org: https://plugins.svn.wordpress.org/learnpress/tags/4.4.9.1/inc/admin/editor/class-lp-admin-editor-course.php plugins.svn.wordpress.org: https://plugins.svn.wordpress.org/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php learnpresslms.com: https://learnpresslms.com/changelog/ wordpress.org: https://wordpress.org/plugins/learnpress/ vulncheck.com: https://www.vulncheck.com/advisories/learnpress-before-4.4.10-missing-authorization-via-legacy-editor-ajax-handlers
Credits
Trần Văn Hoàng