https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:26:17.439444+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12976 CVE-2026-12976 — LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant 2026-10-10T21:26:17.440601+00:00

Affected: Unknown LearnPress

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in.