CVE-2026-12153Patch

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.8. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins from the WordPress.org repository on the vulnerable site.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 7 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • General: 2 classified signals
  • Disclosure: 2 classified signals
  • Peaked 4d ago at 2 mentions (2026-07-08); latest day: 1
  • 7 total mentions across 5 days

Deep dive

Activity timeline7 mentions / 5d
01122Mentions · 2026-07-08: 2Mentions · 2026-07-09: 1Mentions · 2026-07-17: 1Mentions · 2026-07-18: 2Mentions · 2026-07-19: 1Patch / Workaround · 2026-07-08: 2Patch / Workaround · 2026-07-09: 1Technical Details · 2026-07-08: 2Technical Details · 2026-07-09: 107-0807-0907-1707-1807-19
Signal classification3 categories
Patch
342.9%
General
228.6%
Disclosure
228.6%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-082
Patch2
2026-07-091
Patch1
2026-07-171
General1
2026-07-182
Disclosure2
2026-07-191
General1
Full discourse7 posts
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-12153 — CVSS 9.8/10 ██████████ The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/oTvfmPyvOM

    Post summary

    Identified a critical authorization bypass in the WP Learn Manager plugin (CVE-2026-12153) and urged users to apply the patch immediately.

    1000086
    64 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    【緊急】CVE-2026-12153 WP Learn Managerに深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/07/15/cve-2026-12153-wp-learn-manager/ #IT #Security #cybersecurity

    Post summary

    The tweet merely alerts that CVE‑2026‑12153 affects WP Learn Manager and requires urgent attention, without providing any technical details, PoC, or mitigation information.

    0000044
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    【緊急】CVE-2026-12153 WP Learn Managerに深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/07/15/cve-2026-12153-wp-learn-manager/ #IT #Security #cybersecurity

    Post summary

    The post alerts about a newly disclosed critical vulnerability (CVE-2026-12153) in WP Learn Manager, but provides no technical details, proof‑of‑concept, exploit code, or patch information.

    0000051
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    【緊急】CVE-2026-12153 WP Learn Managerに深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/07/15/cve-2026-12153-wp-learn-manager/ #IT #Security #cybersecurity

    Post summary

    The post announces a critical vulnerability (CVE-2026-12153) in WordPress Learn Manager and urges immediate action, but it offers no technical details, proof‑of‑concepts, exploits, or patch information.

    0000052
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    【緊急】CVE-2026-12153 WP Learn Managerに深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/07/15/cve-2026-12153-wp-learn-manager/ #IT #Security #cybersecurity

    Post summary

    The post announces a critical vulnerability (CVE-2026-12153) affecting WP Learn Manager and calls for immediate action, but provides no technical specifics or mitigation guidance.

    0000036
    207 followersView on X
  • ADK Cyber@ADKCyber
    Patch

    CVE-2026-12153 (CVSS 9.8) affects WP Learn Manager WordPress plugin with authorization bypass. Update the plugin immediately if in use: https://nvd.nist.gov/vuln/detail/CVE-2026-12153 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/QpYNzEIIlP

    Post summary

    CVE‑2026‑12153 is a high‑severity authorization bypass in the WP Learn Manager plugin; users are advised to update the plugin immediately.

    0000051
    91 followersView on X
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-12153 — CVSS 9.8/10 ██████████ The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,... Severity: CRITICAL Patch now. #cybersecurity #CVE

    Post summary

    The post reports a critical CVE (CVE‑2026‑12153) affecting the WP Learn Manager plugin via authorization bypass and urges users to apply a patch immediately.

    0000076
    64 followersView on X

Explore more