MEDIUM

CVE-2026-86445

2026-09-16 CVSS v3.1

CVSS

5.3

Description

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative template handlers, allowing unauthenticated attackers to retrieve the text, identifier and type of every published quiz question on the site, along with a keyword search over them, which is content the LearnPress WordPress plugin before 4.4.7 otherwise keeps non-public.

Weakness (CWE)

CWE-200 Information Exposure

EPSS Score

0.33%

Probability of exploitation in next 30 days

26.4th percentile

References

https://wpscan.com/vulnerability/df2d1ebb-ac1d-430d-8e99-7d88df47cf5b/

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE