CVE-2026-12971
LowCVSS 2.2Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
The LearnPress WordPress plugin before version 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery.
Risk Assessment
Instructors could use the server to scan the internal network or attack external systems, potentially leading to data leakage or security breaches.
Recommendation
Update the LearnPress plugin to version 4.4.4 or later, which includes URL validation fixes.
Original NVD description (English source)
The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery.