CVE-2026-75982

Name of the Vulnerable Software and Affected Versions LearnPress versions prior to 4.4.5

Description Authenticated users with Editor-level access and above can modify arbitrary WordPress options. The issue occurs via the learnpress create page AJAX action, where the LP Admin Ajax::create page() handler fails to restrict the field name parameter to an allow-list before passing it to LP Helper::create page(), which subsequently calls update option(). This allows an attacker to change site-wide settings to a positive integer, such as enabling public registration by modifying users can register or corrupting the active plugins option to disrupt site functionality.

Recommendations Update LearnPress to version 4.4.5 or later. As a temporary mitigation, restrict Editor-level access to the learnpress create page AJAX action.