---
id: CVE-2026-113353
title: LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
summary: >-
  LearnPress before 4.4.10 contains a missing authorization vulnerability in the
  admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax
  actions, allowing instructors to modify other instructors' content.
  Authenticated ins…
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-639
vendor: ThimPress
product: LearnPress
affected:
  - LearnPress < 4.4.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-20T14:32:42.250134Z'
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T14:32:51.446Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-113353'
references:
  - url: >-
      https://github.com/LearnPress/learnpress/commit/77087dcdc0e974e8d0844453b4071189fc2c70d2
  - url: >-
      https://plugins.svn.wordpress.org/learnpress/tags/4.4.9.1/inc/admin/editor/class-lp-admin-editor-course.php
  - url: >-
      https://plugins.svn.wordpress.org/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php
  - url: 'https://learnpresslms.com/changelog/'
  - url: 'https://wordpress.org/plugins/learnpress/'
  - url: >-
      https://www.vulncheck.com/advisories/learnpress-before-4.4.10-missing-authorization-via-legacy-editor-ajax-handlers
    label: >-
      VulnCheck Advisory: LearnPress before 4.4.10 Missing Authorization via
      Legacy Editor AJAX Handlers
tags:
  - cve.org
ingestedAt: '2026-10-20T12:05:07.325Z'
---

## Overview

LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse their own generic editor nonce with another object's id parameter to alter courses, change quiz answers, and trash questions.

## Affected

- `LearnPress < 4.4.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.