CVE-2026-12976: LearnPress Auth Bypass Vulnerability

CVE-2026-12976 Overview

CVE-2026-12976 is a broken access control vulnerability in the LearnPress WordPress plugin versions before 4.4.4. The plugin fails to verify enrollment status before processing AI-assistant requests tied to a course's lesson content. Any authenticated user, including a low-privileged subscriber, can query the AI assistant and retrieve material from paid courses they have not purchased or enrolled in. The flaw is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

Critical Impact
Authenticated subscribers can extract paid course content through the AI assistant endpoint, bypassing enrollment and payment controls and undermining the commercial model of affected LearnPress sites.

Affected Products

LearnPress WordPress plugin versions prior to 4.4.4
WordPress sites offering paid or gated courses through LearnPress
LearnPress deployments that expose the AI assistant feature to authenticated users

Discovery Timeline

2026-08-12 - CVE-2026-12976 published to NVD
2026-08-12 - Last updated in NVD database

Technical Details for CVE-2026-12976

Vulnerability Analysis

The vulnerability resides in the LearnPress AI assistant request handler. The handler accepts a course or lesson identifier from an authenticated user and returns AI-generated responses derived from that lesson's content. It does not check whether the requesting user is enrolled in the referenced course before generating the response.

An attacker only needs a valid low-privilege account, such as the default subscriber role. WordPress sites commonly allow open user registration, which lowers the barrier to exploitation. The attacker can enumerate course or lesson IDs and issue AI-assistant requests to extract paid content indirectly.

Because the response is generated from lesson material, the attacker recovers course knowledge without ever gaining direct access to the protected lesson pages. This is a confidentiality-only issue; integrity and availability are not affected.

Root Cause

The root cause is a missing authorization check between authentication and content processing. The AI assistant endpoint validates the session cookie but does not call the enrollment verification routine that LearnPress uses elsewhere to gate lesson content. This gap represents a broken access control pattern in a business-logic path added alongside the AI feature.

Attack Vector

Exploitation proceeds over the network against the WordPress REST or admin-ajax endpoint used by the AI assistant. The attacker registers or authenticates as a subscriber, then submits crafted requests referencing paid course or lesson identifiers. The server returns AI-generated content sourced from the restricted lessons. No user interaction, elevated privileges, or specialized tooling is required beyond a standard HTTP client.

Refer to the WPScan Vulnerability Report for additional technical details.

Detection Methods for CVE-2026-12976

Indicators of Compromise

Repeated authenticated requests from a single subscriber account to the LearnPress AI assistant endpoint referencing multiple distinct course or lesson IDs.
AI assistant requests referencing course IDs that the requesting user has no corresponding enrollment or order record for in the LearnPress database.
Spikes in new subscriber registrations followed shortly by AI assistant API traffic.

Detection Strategies

Correlate LearnPress AI assistant endpoint hits with the learnpress_user_items table to flag requests where user_id has no active enrollment for the referenced course_id.
Deploy web application firewall rules that log and alert on authenticated calls to the AI assistant route targeting course IDs marked as paid.
Review WordPress access logs for enumeration patterns against LearnPress course and lesson identifiers.

Monitoring Recommendations

Enable verbose logging on the LearnPress AI assistant handler and forward logs to a centralized SIEM for correlation with user role and enrollment context.
Monitor subscriber account creation velocity and alert when new accounts immediately exercise course-content APIs.
Track outbound AI-provider token consumption per user to identify accounts abusing the assistant.

How to Mitigate CVE-2026-12976

Immediate Actions Required

Update the LearnPress plugin to version 4.4.4 or later on all WordPress instances.
Audit existing subscriber accounts and revoke any that appear automated or unused.
Review recent AI assistant request logs for evidence of unauthorized content access and notify affected course authors.

Patch Information

The LearnPress maintainers addressed the flaw in version 4.4.4 by adding an enrollment verification step before the AI assistant processes lesson content. Administrators should apply the update through the WordPress plugin manager or WP-CLI and confirm the running version matches or exceeds 4.4.4.

Workarounds

Disable the LearnPress AI assistant feature until the patched version is deployed if immediate updating is not possible.
Restrict WordPress user registration or require administrator approval to reduce the pool of accounts that can reach the vulnerable endpoint.
Apply a WAF rule that blocks authenticated calls to the AI assistant route unless the requesting user has a matching enrollment record.

bash

# Update LearnPress to the patched version using WP-CLI
wp plugin update learnpress --version=4.4.4
wp plugin list --name=learnpress --fields=name,version,status

# Optional: disable open registration while validating exposure
wp option update users_can_register 0