Beta

Report

LearnPress <= 4.2.7.5 is vulnerable to Broken Access Control vulnerability

Unauthenticated
Published
2025-03-26

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.2.7.5. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS

Score:5.3

Severity:Medium

Version: 4.2.7.5

There is a patch available in v4.2.7.6 and we strongly recommend you update to this version as soon as possible.