https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T15:11:30.389689+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-86449 CVE-2026-86449 — LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API 2026-09-28T15:11:30.390820+00:00

Affected: Unknown LearnPress

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthenticated attackers to list courses that are not published, including draft, pending, private, scheduled and trashed ones.