LearnPress – Course Review

LearnPress – Course Review has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for LearnPress – Course Review has a vendor fix available, so running the current release closes it.

All of these findings were reported by Arif Shaikh. LearnPress – Course Review is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all LearnPress – Course Review vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-24361

LearnPress – Course Review <= 4.1.9 - Authenticated (Learnpress student+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2026-01-15 00:00	LearnPress – Course Review <= 4.1.9 - Authenticated (Learnpress student+) Stored Cross-Site Scripting LearnPress <= 4.1.9	`CVE-2026-24361`	6.4 Medium	Arif Shaikh	Yes

Showing 1–1 of 1 reports

Latestv4.2.2

LearnPress – Course Review

Author

ThimPress

2.5(8)

50/100

Last Updated

2026-10-19 (9d ago)

Active Installs

20,000+

Downloads

1,220,421

Requires WP

6.0+

Requires PHP

7.4+

Tested up to

WP 7.1.3

Created

2015-06-16 (12y ago)

Requires Plugins

learnpress

Let students rate and review courses to build trust and social proof.

View on WordPress.org