https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:28:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-370266 EUVD-2026-370266 https://cve.radiocsirt.org/vuln/euvd-2026-370266 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86447 <p>The LearnPress WordPress plugin before 4.4.7 does not check the user&#39;s capabilities in one of its administrative course tools, allowing unauthenticated attackers to list every enrolled student&#39;s display name and user identifier against the course they are enrolled on, and to recover their email addresses through the same handler&#39;s search filter.</p> <p>The LearnPress WordPress plugin before 4.4.7 does not check the user&#39;s capabilities in one of its administrative course tools, allowing unauthenticated attackers to list every enrolled student&#39;s display name and user identifier against the course they are enrolled on, and to recover their email addresses through the same handler&#39;s search filter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-86447 https://cve.radiocsirt.org/vuln/ghsa-63fh-rxp7-xx7r <p>The LearnPress WordPress plugin before 4.4.7 does not check the user&#39;s capabilities in one of its administrative course tools, allowing unauthenticated attackers to list every enrolled student&#39;s display name and user identifier against the course they are enrolled on, and to recover their email addresses through the same handler&#39;s search filter.</p> <p>The LearnPress WordPress plugin before 4.4.7 does not check the user&#39;s capabilities in one of its administrative course tools, allowing unauthenticated attackers to list every enrolled student&#39;s display name and user identifier against the course they are enrolled on, and to recover their email addresses through the same handler&#39;s search filter.</p> https://cve.radiocsirt.org/vuln/ghsa-63fh-rxp7-xx7r