What is GHSA-5c22-cxr9-3pjc?

GHSA-5c22-cxr9-3pjc is a security advisory published by GitHub Security Advisories with Medium severity. The LearnPress WordPress plugin before 4.3.7 does not gate the `edit` context on one of its REST...

Which CVE IDs does GHSA-5c22-cxr9-3pjc cover?

GHSA-5c22-cxr9-3pjc covers the following CVE IDs: CVE-2026-8383. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5c22-cxr9-3pjc?

GHSA-5c22-cxr9-3pjc has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-5c22-cxr9-3pjcMediumCVSS 5.3

The LearnPress WordPress plugin before 4.3.7 does not gate the `edit` context on one of its REST...

Vendor

GitHub Security Advisories

Published

June 17, 2026

Last Modified

June 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-8383 →

📋 Description

The LearnPress WordPress plugin before 4.3.7 does not gate the edit context on one of its REST endpoint behind the edit_users capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted request

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-8383
https://wpscan.com/vulnerability/b7cbf68b-62c5-4787-b84b-69df9e0122b2
https://github.com/advisories/GHSA-5c22-cxr9-3pjc