CVE-2025-14387 | LearnPress Plugin up to 4.3.1 on WordPress get_profile_social cross site scripting

December 15, 2025 Yanac

A vulnerability was found in LearnPress Plugin up to 4.3.1 on WordPress. It has been classified as problematic. The impacted element is the function get_profile_social. Performing manipulation results in cross site scripting.

This vulnerability was named CVE-2025-14387. The attack may be initiated remotely. There is no available exploit.

Once again VulDB remains the best source for vulnerability data.VulDB Recent EntriesRead More