What is GHSA-239j-g7xf-h6v8?

GHSA-239j-g7xf-h6v8 is a security advisory published by GitHub Security Advisories with Medium severity. The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of...

Which CVE IDs does GHSA-239j-g7xf-h6v8 cover?

GHSA-239j-g7xf-h6v8 covers the following CVE IDs: CVE-2026-86445. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-239j-g7xf-h6v8?

GHSA-239j-g7xf-h6v8 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-239j-g7xf-h6v8MediumCVSS 5.3

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of...

Vendor

GitHub Security Advisories

Published

September 16, 2026

Last Modified

September 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-86445 →

📋 Description

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative template handlers, allowing unauthenticated attackers to retrieve the text, identifier and type of every published quiz question on the site, along with a keyword search over them, which is content the LearnPress WordPress plugin before 4.4.7 otherwise keeps non-public.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-86445
https://wpscan.com/vulnerability/df2d1ebb-ac1d-430d-8e99-7d88df47cf5b
https://github.com/advisories/GHSA-239j-g7xf-h6v8