LearnPress < 4.2.6.8.1 - Information Disclosure
CVE-2024-5483
Verified
Description
LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by incorrect implementation of get_items_permissions_check function in all versions up to 4.2.6.8, letting unauthenticated attackers extract user emails and basic information.
Severity
Medium
CVSS Score
5.3
Exploit Probability
1%
Affected Product
learnpress
Published Date
February 7, 2026
Template Author
pussycat0x
CVE-2024-5483.yaml
5.3Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE ID:
cve-2024-5483
CWE ID:
cwe-200
Remediation Steps
Update to version 4.2.6.9 or later.