CVE-2026-7565

Name of the Vulnerable Software and Affected Versions LearnPress – Backup & Migration Tool versions prior to 4.1.5

Description The plugin is susceptible to arbitrary file read through directory traversal, a technique that allows access to files and directories outside the intended folder. Authenticated attackers with administrator-level access or higher can exploit the import-user-file parameter to read sensitive files on the server.

Recommendations Update the plugin to a version later than 4.1.4. As a temporary mitigation, restrict access to the import-user-file parameter.