Unrated severityNVD Advisory· Published Aug 12, 2026

CVE-2026-12976

Description

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Learnpressllm-fuzzy
Range: <4.4.4
Package: https://wordpress.org/plugins/learnpress

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/fb68779f-40f5-4746-8b18-b0801b673edd/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000