LearnPress – Course Review

LearnPress – Course Review has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for LearnPress – Course Review has a vendor fix available, so running the current release closes it.

All of these findings were reported by Arif Shaikh. LearnPress – Course Review is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all LearnPress – Course Review vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-24361

LearnPress – Course Review <= 4.1.9 - Authenticated (Learnpress student+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
LearnPress – Course Review banner
Latestv4.2.0

LearnPress – Course Review

ThimPress

Author

ThimPress

2.5(8)
50/100
Last Updated
2026-08-22 (22d ago)
Active Installs
20,000+
Downloads
1,196,644
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2015-06-16 (11y ago)
Requires Plugins
learnpress

LearnPress is a WordPress LMS Plugin by ThimPress. LearnPress Course Review bring review feature to your course. Now, student can rate and give review for the course they take on a LearnPress site. Review add-on for LearnPress is using on some WordPress Themes: Education WordPress Theme and LMS WordPress Theme, more is coming. Other free add-ons for LearnPress are available in WordPress: LearnPress Wishlist – add courses to a wishlist for students. LearnPress Course Review – review course for enrolled students. LearnPress Import Export – export or import course or courses out-of-box. LearnPress Prerequisites Courses – require student to pass some courses in order to enroll other course. LearnPress bbPress – add bbPress Forum support for LearnPress. LearnPress BuddyPress – add BuddyPress support for LearnPress. Premium Plugins (add-ons) for LearnPress WordPress LMS Plugin Certificates add-on for LearnPress – adding drag & drop certificates builder as well as selecting designed certificate for each LMS course, your student will get particular certificate when they finished a course. Co-instructors add-on for LearnPress – multiple instructors support for each LMS course. Collections add-on for LearnPress – making LMS courses collection by selecting number of courses, this is helpful if you want to combine multiple LMS courses into a collection for a group of skills. Stripe Payment method for LearnPress – Stripe payment method for LearnPress WordPress LMS Plugin. WooCommerce add-on for LearnPress – using WooCommerce as payment gateway for LearnPrss WordPress LMS Plugin. Other note Documentation is available in ThimPress site. LearnPress github repo.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C