{
 "id": "WPSEC-2026-1603",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1603/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1603/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1603/index.md",
 "title": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.11 - Authenticated (LP Instructor+) Missing Authorization to Quiz Answer Key and Course Curriculum Disclosure via Editor Callbacks",
 "description": "The LearnPress plugin for WordPress is vulnerable to unauthorized access of data in versions 4.2.8.6 up to, and including, 4.4.11, due to the question editor, quiz editor and course curriculum editor callbacks of the load_content_via_ajax handler lacking an edit permission check on the requested question, quiz or course and verifying at most a generic capability to create items. This makes it possible for authenticated attackers, with LP Instructor-level access and above, to view the editor content of other instructors' questions, quizzes and course curricula, including which answers are marked correct.",
 "plugin": {
  "slug": "learnpress",
  "name": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses",
  "full_name": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses",
  "wordpress_org": "https://wordpress.org/plugins/learnpress/",
  "advisories_url": "https://wpsec.com/vuln/plugin/learnpress/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/learnpress"
 },
 "type": "NO AUTHORISATION",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 4.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": "4.2.8.6",
    "from_inclusive": true,
    "to": "4.4.12",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 4.2.8.6 before 4.4.12"
  ]
 },
 "introduced_in": "4.2.8.6",
 "fixed_in": "4.4.12",
 "remediation": "Update to 4.4.12 or later.",
 "fix_released": "2026-10-23T09:07:13+00:00",
 "published": "2026-10-24T13:43:24+00:00",
 "updated": "2026-10-24T13:33:37.781885+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1603/",
  "https://plugins.svn.wordpress.org/learnpress/tags/4.4.12/",
  "https://wordpress.org/plugins/learnpress/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/learnpress",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-10-25"
 }
}