https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:20:35.487625+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-86449 fkie_cve-2026-86449 2026-09-28T16:20:35.515562+00:00

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthenticated attackers to list courses that are not published, including draft, pending, private, scheduled and trashed ones.

 https://db.gcve.eu/vuln/ghsa-gwwh-q58c-5868 GHSA-gwwh-q58c-5868 2026-09-28T16:20:35.515660+00:00

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthenticated attackers to list courses that are not published, including draft, pending, private, scheduled and trashed ones.