WP Learn Manager, CVE-2026-12153

CVE, Research URL: CVE-2026-12153
Home page URL: Security reports for WP Learn Manager
Application: WP Learn Manager
Published on: Jul 08, 2026
Research Description: The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.8. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins from the WordPress.org repository on the vulnerable site.
Affected versions: max 1.1.8.
Status: vulnerable