CVE-2026-104403 WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 5.3
EPSS 0.20%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects LearnPress: from n/a through 4.4.9.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ThimPress LearnPress | < 4.4.9.1 | 4.4.9.1 |
| wordpress learnpress(WordPress) | < 4.4.9.1 | 4.4.9.1 |
References
- patchstack.com vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org