CVE-2026-7648: Payment Bypass in LearnPress WordPress LMS
Plattform
wordpress
Komponente
learnpress
Behoben in
4.3.6
CVE-2026-7648 is a payment bypass vulnerability discovered in the LearnPress WordPress LMS plugin. This flaw allows authenticated attackers, even those with subscriber-level access, to enroll in paid courses without payment. The vulnerability impacts versions of LearnPress up to and including 4.3.5, and a patch is available in version 4.3.6.
Erkenne diese CVE in deinem Projekt
Lade deine Abhängigkeitsdatei hoch und erfahre sofort, ob dich diese und andere CVEs treffen.
Auswirkungen und Angriffsszenarien
The primary impact of CVE-2026-7648 is the ability for attackers to gain free access to paid courses within a LearnPress-powered WordPress site. This directly impacts revenue streams for course creators and potentially exposes course content to unauthorized individuals. While the vulnerability requires authentication (subscriber level or higher), the ease of access makes it a significant risk. An attacker could systematically enroll in all paid courses, potentially disrupting the platform's financial model and undermining the value proposition for paying customers. The potential for abuse extends beyond simple free access; attackers could use this to build a large number of fake accounts to manipulate course rankings or reviews.
Ausnutzungskontext
CVE-2026-7648 was published on 2026-05-13. Its CVSS score of 4.3 indicates a medium severity. No public exploits or proof-of-concept code have been identified as of this writing. It is not currently listed on KEV or EPSS, suggesting a low probability of active exploitation. Monitor security advisories and threat intelligence feeds for any updates regarding exploitation attempts.
Bedrohungsanalyse
Exploit-Status
CISA SSVC
CVSS-Vektor
Was bedeuten diese Metriken?
- Attack Vector
- Netzwerk — aus der Ferne über das Internet ausnutzbar. Kein physischer oder lokaler Zugriff erforderlich.
- Attack Complexity
- Niedrig — keine besonderen Bedingungen erforderlich. Zuverlässig ausnutzbar.
- Privileges Required
- Niedrig — jedes gültige Benutzerkonto ist ausreichend.
- User Interaction
- Keine — automatischer und lautloser Angriff. Das Opfer tut nichts.
- Scope
- Unverändert — Auswirkung auf das anfällige Komponente beschränkt.
- Confidentiality
- Keine — kein Vertraulichkeitseinfluss.
- Integrity
- Niedrig — Angreifer kann einige Daten mit begrenztem Umfang ändern.
- Availability
- Keine — kein Verfügbarkeitseinfluss.
Betroffene Software
Schwachstellen-Klassifikation (CWE)
Zeitleiste
- Reserviert
- Veröffentlicht
- Geändert
Mitigation und Workarounds
The primary mitigation for CVE-2026-7648 is to immediately upgrade the LearnPress plugin to version 4.3.6 or later. If upgrading is not immediately feasible due to compatibility issues or testing requirements, consider implementing temporary workarounds. While a direct WAF rule is difficult to implement without specific knowledge of the vulnerable endpoint, restricting access to the LearnPress REST API endpoint responsible for adding items to the cart (investigate the addtocart() function call) could offer limited protection. Thoroughly test any configuration changes in a staging environment before applying them to production. After upgrading, confirm the vulnerability is resolved by attempting to enroll in a paid course with a subscriber-level user account and verifying that payment is required.
So beheben
Aktualisieren Sie auf Version 4.3.6 oder eine neuere gepatchte Version
Häufig gestellte Fragen
What is CVE-2026-7648 — Payment Bypass in LearnPress WordPress LMS?
CVE-2026-7648 is a medium severity vulnerability affecting LearnPress WordPress LMS plugin versions up to 4.3.5. It allows authenticated attackers to bypass payment and enroll in paid courses for free.
Am I affected by CVE-2026-7648 in LearnPress WordPress LMS?
You are affected if your WordPress site uses the LearnPress plugin and is running version 4.3.5 or earlier. Check your plugin version and upgrade immediately if necessary.
How do I fix CVE-2026-7648 in LearnPress WordPress LMS?
Upgrade the LearnPress plugin to version 4.3.6 or later. If immediate upgrade is not possible, consider temporary workarounds like restricting access to the vulnerable REST API endpoint.
Is CVE-2026-7648 being actively exploited?
As of now, there are no reports of active exploitation or public proof-of-concept code available. However, it's crucial to apply the patch promptly to mitigate the risk.
Where can I find the official LearnPress advisory for CVE-2026-7648?
Refer to the official LearnPress plugin website and WordPress plugin repository for the latest security advisories and updates related to CVE-2026-7648.
Ist dein Projekt betroffen?
Lade deine Abhängigkeitsdatei hoch und erfahre sofort, ob dich diese und andere CVEs treffen.
Erkenne diese CVE in deinem Projekt
Lade deine Abhängigkeitsdatei hoch und erfahre sofort, ob dich diese und andere CVEs treffen.
Scannen Sie jetzt Ihr WordPress-Projekt – kein Konto
Laden Sie ein Manifest hoch (composer.lock, package-lock.json, WordPress Plugin-Liste…) oder fügen Sie Ihre Komponentenliste ein. Sie erhalten sofort einen Schwachstellenbericht. Das Hochladen einer Datei ist nur der Anfang: Mit einem Konto erhalten Sie kontinuierliche Überwachung, Slack/email-Benachrichtigungen, Multi-Projekt- und White-Label-Berichte.
Abhängigkeitsdatei hier ablegen
composer.lock, package-lock.json, requirements.txt, Gemfile.lock, pubspec.lock, Dockerfile...