CVE-2025-13956 Scanner
CVE-2025-13956 Scanner - Information Disclosure vulnerability in LearnPress
Used 3.5k times · 5.9k assets checked · url
CVE
CVE-2025-13956
5.3
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the statistic function in all versions up to, and including, 4.3.1. This makes it possible for unauthenticated attackers to view the plugin's orders statistics, including total revenue summaries and order status counts
Attack Vector
Network
Privileges Req.
None
User Interaction
None
learnpress – wordpress lms plugin for create and sell online courses
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: learnpress – wordpress lms plugin for create and sell online courses
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →