VulnSocial

CVE-2024-11868Disclosure(thimpress / learnpress)

LOWCVSS 5.3 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.3 via class-lp-rest-material-controller.php. This makes it possible for unauthenticated attackers to extract potentially sensitive paid course material.

thimpress CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • learnpress

Threat summary

  • Public PoC is present in monitored signal
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
thimpress
Products
learnpress

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-10: 1PoC Mentioned / Linked · 2026-02-10: 1Technical Details · 2026-02-10: 102-10
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2024-11868 - medium 🚨 LearnPress < 4.2.7.4 - Course Material - Information Disclosure > LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by... 👾 https://cloud.projectdiscovery.io/library/CVE-2024-11868 @pdnuclei #NucleiTemplates #cve

    Post summary

    A medium‑severity information‑disclosure vulnerability (CVE‑2024‑11868) exists in LearnPress versions below 4.2.7.4; a Nuclei template is linked for detection, but no active exploitation, patch, or false‑positive claim is mentioned.

    00000126
    890 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appthimpresslearnpress-wordpress-

Explore more

Back to dashboardthimpress CVEslearnpress vulnerabilities