CVE-2026-86446
LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken without enrolling.
| Vendor | unknown |
| Product | learnpress |
| Published | Sep 17, 2026 |
| Last Updated | Sep 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown learnpress
Be the first to know when new low vulnerabilities affecting unknown learnpress are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / LearnPress
4.4.3 < 4.4.7
References
Credits
Nicat Sultanov WPScan