Description

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.5",
  "pubDate": "2026-08-12T06:17:09.410Z",
  "pubdate": "2026-08-12T06:17:09.410Z",
  "executiveSummary": "A broken access control vulnerability exists in the LearnPress WordPress plugin prior to version 4.4.4, allowing authenticated users with low privileges, such as subscribers, to compromise sensitive educational content.\nThe vulnerability arises from the application's failure to enforce proper authorization checks, specifically omitting verification of whether a requesting user is actively enrolled in a target course before fulfilling AI-assistant requests tied to that course's lesson materials.\nConsequently, malicious actors or unauthorized users can bypass enrollment barriers to exfiltrate and obtain proprietary curriculum data from paid courses without purchasing or registering for them.\nThe risk implication centers on unauthorized data disclosure of premium intellectual property and paid educational resources hosted on the WordPress platform.\nExploitation requires the attacker to possess an authenticated account on the target WordPress instance, such as a basic subscriber role, and to interact with the plugin's AI-assistant functionality to query unrolled lesson content over the network.\nThis vulnerability highlights a critical flaw in authorization validation logic within feature-specific endpoint controllers.",
  "technicalDetails": "The root cause of this security defect is an absence of server-side access control checks and course enrollment validation within the AI-assistant request processing pipeline of the LearnPress plugin.\nWhen an AI-assistant request is dispatched targeting a specific course's lesson content, the vulnerable component processes the query without validating the user's session against the course enrollment database tables to confirm active enrollment status.\nThe affected product is the LearnPress WordPress plugin, specifically affecting all versions prior to version 4.4.4.\nThe attack vector is network-based, requiring the attacker to have network access to the WordPress site and a valid, authenticated user session with low privileges, such as the subscriber role.\nPrivilege requirements are minimal, as any authenticated user can initiate the malicious requests.\nThe step-by-step attack flow proceeds as follows: First, an attacker authenticates to the WordPress site, acquiring a standard subscriber-level session cookie. Second, the attacker identifies or enumerates IDs of paid or restricted courses and their corresponding lesson contents. Third, the attacker crafts and sends an HTTP request invoking the LearnPress AI-assistant feature directed at the restricted lesson content. Fourth, because the backend logic fails to verify course enrollment, the application processes the AI-assistant request against the protected lesson data. Fifth, the AI-assistant function returns the processed material or responses derived from the restricted lesson content to the attacker. Finally, the attacker successfully obtains proprietary material from courses they have not purchased or enrolled in, achieving unauthorized information disclosure."
}