CVE-2026-104736 | thimpress LearnPress Plugin up to 4.4.10 on WordPress Checkout AJAX Action LP_Session_Handler::get checkout-email deserialization

October 17, 2026 Yanac

A vulnerability was found in thimpress LearnPress Plugin up to 4.4.10 on WordPress. It has been declared as critical. This issue affects the function LP_Session_Handler::get of the component Checkout AJAX Action. Executing a manipulation of the argument checkout-email can lead to deserialization.

This vulnerability is handled as CVE-2026-104736. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More