CVE-2026-107744: CWE-862 Missing Authorization in thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
Description
LearnPress – WordPress LMS Plugin versions up to and including 4.4.10 contains an authorization bypass vulnerability. Authenticated users with subscriber-level access or higher can enumerate all site users and extract their email addresses character-by-character. This occurs because the plugin does not properly verify user authorization for certain actions.
CVSS v3.1
Score 6.5medium
Affected software
thimpress
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-107744 is an authorization bypass vulnerability (CWE-862) in the LearnPress – WordPress LMS Plugin for WordPress, affecting all versions up to 4.4.10. The flaw allows authenticated attackers with subscriber-level privileges or above to enumerate the entire user list and extract email addresses by leveraging the search response as an oracle against user_login and user_email database columns. This vulnerability arises from improper authorization checks within the plugin's functionality.
Potential Impact
An attacker with minimal authenticated access can retrieve the full list of site users and their email addresses, including those of administrators. This exposure of sensitive user information can facilitate targeted phishing or social engineering attacks. The vulnerability does not allow modification or deletion of data, nor does it impact availability.
Mitigation Recommendations
No official patch or fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict subscriber-level access where possible and monitor for suspicious activity related to user enumeration.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Wordfence
- Date Reserved
- 2026-10-08T18:25:02.823Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ad2f3b02cdf04f656deaea4
Added to database: 10/17/2026, 04:04:00 UTC
Last enriched: 10/17/2026, 04:19:15 UTC
Last updated: 10/17/2026, 04:19:15 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.