CVE-2026-82023

Name of the Vulnerable Software and Affected Versions LearnPress WordPress Plugin versions prior to 4.4.6

Description Authenticated attackers with the Instructor role can add answers to quiz questions owned by other instructors. This occurs due to a missing ownership and capability check on the question answer insert path, allowing attackers to supply arbitrary question identifiers and bypass instructor-boundary restrictions to persistently modify quiz content across courses they do not own.

Recommendations Update the plugin to version 4.4.6 or later.