CVE-2026-86448 in LearnPress Plugin
الملخص
بحسب MITRE • 16/09/2026
The LearnPress WordPress plugin before 4.4.7 does not perform any authentication, capability or nonce check before serving a previously generated order export file, allowing unauthenticated attackers who can determine its identifier to download customer names, purchases, amounts and guest email addresses.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.