https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T08:24:22.835622+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338902 EUVD-2026-338902 2026-10-13T08:24:22.878775+00:00 EUVD-2026-338902 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12970 fkie_cve-2026-12970 2026-10-13T08:24:22.878806+00:00

The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML attribute, leading to Reflected Cross-Site Scripting that executes in the browser of a logged-in instructor or administrator who is tricked into opening a crafted link.

 https://cve.radiocsirt.org/vuln/ghsa-q3xc-67mx-mvw3 GHSA-q3xc-67mx-mvw3 2026-10-13T08:24:22.878837+00:00

The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML attribute, leading to Reflected Cross-Site Scripting that executes in the browser of a logged-in instructor or administrator who is tricked into opening a crafted link.