LearnPress CVE-2026-12976

Exploitation requires an authenticated WordPress session at subscriber level or higher - any registered user account is sufficient. On sites with open self-registration, this makes the vulnerability exploitable by any internet user who creates a free account. The LearnPress AI-assistant feature must be installed and active on the target site; deployments that have not enabled this feature are not exposed through this specific vector. The CVSS vector (PR:L) confirms the authenticated session requirement. Exploitation is bounded to confidentiality impact - paid course lesson content can be read but data cannot be modified and service availability is not affected. Sites that restrict user registration to administrator-created accounts meaningfully reduce the exploitable population but do not eliminate risk from compromised or malicious existing accounts.

The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) accurately reflects the risk: network-exploitable, low complexity, requiring only a basic authenticated WordPress session, with high confidentiality impact and no integrity or availability component. This is not a case of an inflated score masking low real-world risk - all available signals converge. The 15% EPSS score places this vulnerability in roughly the top 15% of CVEs by near-term exploitation probability, and a public PoC from WPScan further elevates the likelihood of opportunistic exploitation. There is no CISA KEV listing at time of analysis, so confirmed mass exploitation is not established, but the simplicity of the exploit means that even a mid-sized municipal IT team in inowroclaw operating a WordPress-based e-learning portal should treat this as urgent rather than a low-priority patch cycle item. The sole meaningful barrier is the authenticated session requirement, which on sites with open self-registration is a trivial obstacle for any internet user.

An attacker registers a free subscriber account on a WordPress site running a vulnerable LearnPress version, then sends crafted HTTP requests to the plugin's AI-assistant endpoint, specifying lesson or course IDs associated with premium paid content. Because the plugin processes the request without verifying enrollment, the lesson material is returned in full. A public PoC is available via WPScan, substantially lowering the technical bar and enabling exploitation by non-specialist attackers.