Known vulnerabilities in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
A WordPress LMS Plugin to create WordPress Learning Management System. Turn your WordPress to LMS WordPress Website with Courses, Lessons, Quizzes &am …
80Reported vulnerabilities
9.8Highest CVSS score
4.4.4Latest version
70,000+Active installs
What to do now
Update LearnPress – WordPress LMS Plugin for Create and Sell Online Courses to 4.4.6 or later.
80 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2024-8522 | High | 62.9% | Before 4.2.7.1 | 4.2.7.1 |
September 12, 2024 |
| CVE-2020-6010 | High | 49.2% | 3.2.6.7 and earlier | 3.2.6.8 |
April 30, 2020 |
| CVE-2024-4434 | Critical | 36.9% | Before 4.2.6.6 | 4.2.6.6 |
May 14, 2024 |
| CVE-2023-6567 | High | 51.4% | Before 4.2.5.8 | 4.2.5.8 |
January 11, 2024 |
| CVE-2022-47615 | Critical | 5.1% | Before 4.2.0 | 4.2.0 |
January 26, 2023 |
| CVE-2022-45808 | Critical | 4.3% | 4.1.7.3.2 and earlier | 4.2.0 |
January 26, 2023 |
| CVE-2021-24951 | Critical | 1.6% | Before 4.1.4 | 4.1.4 |
December 13, 2021 |
| CVE-2020-11511 | High | 3.2% | Before 3.2.6.9 | 3.2.6.9 |
July 30, 2021 |
| CVE-2023-6634 | Critical | 8.5% | 4.2.5.7 and earlier | 4.2.5.8 |
January 11, 2024 |
| CVE-2022-45820 | High | 1.0% | 4.1.7.3.2 and earlier | 4.2.0 |
January 26, 2023 |
| CVE-2022-3360 | High | 2.0% | Before 4.1.7.2 | 4.1.7.2 |
October 31, 2022 |
| CVE-2024-8529 | High | 11.8% | Before 4.2.7.1 | 4.2.7.1 |
September 12, 2024 |
| CVE-2022-0271 | Medium | 2.3% | Before 4.1.6 | 4.1.6 |
April 11, 2022 |
| CVE-2024-4444 | Medium | 0.7% | Before 4.2.6.6 | 4.2.6.6 |
May 14, 2024 |
| CVE-2021-39348 | Medium | 5.2% | 4.1.3.1 and earlier | 4.1.3.2 |
October 21, 2021 |
| CVE-2023-5558 | Medium | 0.9% | Before 4.2.5.5 | 4.2.5.5 |
January 16, 2024 |
| CVE-2022-0377 | Medium | 3.2% | Before 4.1.5 | 4.1.5 |
February 28, 2022 |
| CVE-2026-4365 | Critical | 0.9% | 0 to 4.3.2.8 (inclusive) | 4.3.3 |
April 14, 2026 |
| CVE-2024-6589 | High | 0.8% | 4.2.6.8.2 and earlier | 4.2.6.9 |
July 25, 2024 |
| CVE-2024-4397 | High | 1.0% | Before 4.2.6.6 | 4.2.6.6 |
May 14, 2024 |
| CVE-2024-13128 | Medium | 0.3% | Before 4.2.7.5.1 | 4.2.7.5.1 |
May 15, 2025 |
| CVE-2024-13127 | Medium | 0.3% | Before 4.2.7.5.1 | 4.2.7.5.1 |
May 15, 2025 |
| CVE-2024-9881 | Medium | 0.4% | Before 4.2.7.2 | 4.2.7.2 |
December 12, 2024 |
| CVE-2024-10010 | Medium | 0.4% | Before 4.2.7.2 | 4.2.7.2 |
December 12, 2024 |
| CVE-2024-2115 | High | 0.3% | Before 4.0.1 | 4.0.1 |
April 5, 2024 |
| CVE-2021-24702 | Medium | 0.7% | Before 4.1.3.1 | 4.1.3.1 |
October 18, 2021 |
| WF-9f9e5212-caed-46db-bbf2-81c4df88439f | High | — | 3.2.7.2 and earlier | 3.2.7.3 |
October 5, 2020 |
| CVE-2026-8383 | Medium | 7.6% | 4.3.6 and earlier | 4.3.7 |
June 27, 2026 |
| CVE-2026-13765 | High | 0.7% | 0 to 4.4.1 (inclusive) | 4.4.2 |
July 17, 2026 |
| CVE-2018-16175 | High | 1.3% | 3.0.12 and earlier | 3.1.0 |
November 9, 2018 |
| CVE-2023-36515 | High | 0.4% | 4.2.3 and earlier | 4.2.3.1 |
July 4, 2023 |
| CVE-2020-11510 | High | — | 3.2.6.8 and earlier | 3.2.6.9 |
April 19, 2020 |
| CVE-2020-7916 | Medium | 1.1% | 3.2.6.5 and earlier | 3.2.6.8 |
March 16, 2020 |
| CVE-2024-7548 | Medium | 0.6% | Before 4.2.6.9.4 | 4.2.6.9.4 |
August 8, 2024 |
| CVE-2026-12732 | Medium | 0.3% | 0 to 4.4.0 (inclusive) | 4.4.1 |
July 1, 2026 |
| CVE-2026-11988 | Medium | 0.5% | 0 to 4.3.9.1 (inclusive) | 4.4.0 |
July 1, 2026 |
| CVE-2026-4333 | Medium | 0.3% | 0 to 4.3.3 (inclusive) | 4.3.4 |
April 8, 2026 |
| CVE-2025-11372 | Medium | 0.4% | 0 to 4.2.9.3 (inclusive) | 4.2.9.4 |
October 18, 2025 |
| CVE-2018-16174 | Medium | 1.0% | 3.0.12 and earlier | 3.1.0 |
November 9, 2018 |
| CVE-2026-12971 | Medium | 0.2% | 4.4.3 and earlier | 4.4.4 |
August 6, 2026 |
| CVE-2025-14387 | Medium | 0.2% | 4.3.1 and earlier | 4.3.2 |
December 15, 2025 |
| CVE-2025-67536 | Medium | 0.2% | 4.2.9.4 and earlier | 4.3.0 |
November 6, 2025 |
| CVE-2018-16173 | Medium | 1.0% | 3.0.12 and earlier | 3.1.0 |
November 9, 2018 |
| CVE-2026-12970 | Medium | 0.3% | 4.4.0 and earlier | 4.4.1 |
June 29, 2026 |
| CVE-2026-48865 | Medium | 0.2% | 4.3.6 and earlier | 4.3.7 |
June 1, 2026 |
| WF-d7bee25e-7574-4d3d-ad58-9b30d99de525 | Medium | — | 4.1.6.7 and earlier | 4.1.6.8 |
July 5, 2022 |
| WF-ca203777-84ea-47ab-bafc-f2cc8f778fcd | Medium | — | 4.1.6.5 and earlier | 4.1.6.6 |
June 14, 2022 |
| WF-bc91449a-7013-430d-bf7c-70175ea45114 | Medium | — | Before 3.2.7.3 | 3.2.7.3 |
September 8, 2020 |
| CVE-2024-11868 | Medium | 1.1% | Before 4.2.7.4 | 4.2.7.4 |
December 10, 2024 |
| CVE-2024-5483 | Medium | 1.0% | Before 4.2.6.8.1 | 4.2.6.8.1 |
June 5, 2024 |
| CVE-2026-8502 | Medium | 0.5% | 0 to 4.3.6 (inclusive) | 4.3.7 |
June 6, 2026 |
| CVE-2025-14802 | Medium | 0.3% | 0 to 4.3.2.1 (inclusive) | 4.3.2.2 |
January 7, 2026 |
| CVE-2025-13956 | Medium | 0.9% | 0 to 4.3.1 (inclusive) | 4.3.2 |
December 16, 2025 |
| CVE-2025-11368 | Medium | 1.0% | 0 to 4.2.9.4 (inclusive) | 4.3.0 |
November 21, 2025 |
| CVE-2024-13599 | Medium | 0.3% | Before 4.2.7.5.1 | 4.2.7.5.1 |
January 25, 2025 |
| CVE-2025-24740 | Medium | 0.3% | 4.2.7.1 and earlier | 4.2.7.2 |
January 24, 2025 |
| CVE-2024-39642 | Medium | 0.4% | 4.2.6.8.2 and earlier | 4.2.6.9 |
August 1, 2024 |
| CVE-2024-6088 | Medium | 0.6% | Before 4.2.6.8.2 | 4.2.6.8.2 |
July 2, 2024 |
| CVE-2024-4971 | Medium | 0.3% | Before 4.2.6.7 | 4.2.6.7 |
May 22, 2024 |
| CVE-2024-4277 | Medium | 0.3% | Before 4.2.6.6 | 4.2.6.6 |
May 14, 2024 |
| CVE-2024-3560 | Medium | 0.3% | Before 4.2.6.5 | 4.2.6.5 |
April 19, 2024 |
| CVE-2024-1289 | Medium | 0.4% | Before 4.2.6.4 | 4.2.6.4 |
April 9, 2024 |
| CVE-2023-36516 | Medium | 0.5% | 4.2.3 and earlier | 4.2.3.1 |
July 4, 2023 |
| CVE-2026-82023 | Medium | 0.2% | 0 up to (but not including) 4.4.6 | 4.4.6 |
September 3, 2026 |
| CVE-2025-14798 | Medium | 0.3% | 0 to 4.3.2.4 (inclusive) | 4.3.2.5 |
January 20, 2026 |
| CVE-2025-13964 | Medium | 0.3% | 0 to 4.3.2 (inclusive) | 4.3.2.1 |
January 6, 2026 |
| CVE-2025-66054 | Medium | 0.3% | 4.2.9.4 and earlier | 4.3.0 |
November 30, 2025 |
| CVE-2025-22739 | Medium | 0.3% | 4.2.7.5 and earlier | 4.2.7.6 |
March 27, 2025 |
| CVE-2024-6099 | Medium | 0.4% | Before 4.2.6.8.2 | 4.2.6.8.2 |
July 2, 2024 |
| WF-389277fd-e47e-42df-9305-61ceedbcfb29 | Medium | — | Before 4.2.3.1 | 4.2.3.1 |
July 6, 2023 |
| CVE-2026-82024 | Medium | 0.1% | 0 up to (but not including) 4.4.6 | 4.4.6 |
September 3, 2026 |
| CVE-2026-77823 | Medium | 0.4% | 0 to 4.4.4 (inclusive) | 4.4.5 |
September 1, 2026 |
| CVE-2024-1463 | Medium | 0.4% | Before 4.2.6.4 | 4.2.6.4 |
April 9, 2024 |
| CVE-2026-75982 | Medium | 0.2% | 0 to 4.4.4 (inclusive) | 4.4.5 |
August 25, 2026 |
| CVE-2026-12976 | Medium | 0.3% | Before 4.4.4 | 4.4.4 |
August 13, 2026 |
| CVE-2026-7648 | Medium | 0.4% | 0 to 4.3.5 (inclusive) | 4.3.6 |
May 14, 2026 |
| CVE-2026-3225 | Medium | 0.3% | 0 to 4.3.2.8 (inclusive) | 4.3.3 |
March 23, 2026 |
| CVE-2026-3226 | Medium | 0.2% | 0 to 4.3.2.8 (inclusive) | 4.3.3 |
March 12, 2026 |
| CVE-2024-39641 | Medium | 0.2% | 4.2.6.8.2 and earlier | 4.2.6.9 |
August 1, 2024 |
| CVE-2023-6223 | Medium | 0.3% | 4.2.5.7 and earlier | 4.2.5.8 |
January 11, 2024 |