LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 38% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ shaleneza

   2mo ago

   I have been using LearnPress for years. I have noticed that support has very much improved. If you tried LP before and struggled, give it another chance. The plugin is really very good now and the support is excellent.

   Read on wp.org ↗
2. ★★★★★ sonicsha

   3mo ago

   I totally recommend them. They smoothly helped me out in every way they can whenever I needed them.

   Read on wp.org ↗
3. ★★★★★ José Manuel

   4mo ago

   Como es posible, que con la version 4.3.5, se rompa toda la base de datos? No distinque a los usuarios, se pierde la wishh-list, no salen los cursos en la portada…. un desastre. Como siga la cosa así, me busco otra LMS. This topic was modified 3 months ago by José Manuel.

   Read on wp.org ↗
4. ★★★★★ linternet6

   5mo ago

   Really nice, a joy to use.

   Read on wp.org ↗
5. ★★★★★ Dunos

   7mo ago

   I’ve been using LearnPress for a while now and it does exactly what I need for building online courses. It’s easy to use, and the new AI feature is a great bonus. I really appreciate that the team keeps improving the plugin, and I’m excited to see what new features come in future updates. Definitely a 5-star plugin!

   Read on wp.org ↗
6. ★★★★★ Alex

   7mo ago

   Easy and flexible plugin

   Read on wp.org ↗
7. ★★★★★ bakhtiyor1chi

   9mo ago

   I recommend it for anyone who is planning to sell online courses or build platform for it. You can do it in your own language as well. The PlugIn has good interface, good speed and a wide range of features. They also offer paid theme but you get a long with free ones for the beginning. This topic was modified 7 months, 4 weeks ago by bakhtiyor1chi.

   Read on wp.org ↗
8. ★★★★★ robertodimaio

   10mo ago

   The technical support hasn’t been the best so far, but it seems they’re improving, and considering the latest updates, I can express my full satisfaction. I hope this satisfaction continues over time. Good luck and thank to Brianvu-tp

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-22 Version 4.4.5 ~ Added: LearnPress Help Center in the admin menu. ~ Improved admin menu structure and how submenus are registered. ~ Improved reusable UI components: form filter, fullscreen, toggle enable. ~ Improved Students Enrolled 4.4.5
2. 2026-08-03 Version 4.4.4 ~ Fixed: security. ~ Fixed: minor bugs. ~ Update some library to latest. 4.4.4
3. 2026-07-26 Version 4.4.3 ~ Fixed: security. ~ Fixed: minor bugs. ~ Tweak: UI/UX statistic. 4.4.3
4. 2026-07-11 Version 4.4.2 ~ Fixed: security. ~ Fixed: display Date time on Order. ~ Fixed: selected method payment on the checkout page. ~ Fixed: minor bug on Course Builder. ~ Unregister select2 library. ~ Added: feature Webhook. ~ MCP: added fu 4.4.2
5. 2026-06-26 Version 4.4.1 ~ Fixed: security. ~ Fixed: minor bugs. 4.4.1
6. 2026-06-16 Version 4.4.0 ~ Fixed: security. ~ Fixed: check permission create/edit course/lesson/quiz/question on Course Builder. ~ Fixed: editor edit question Fill In Blank. ~ Feature: refund order, support PayPal, option auto refund, refund req 4.4.0

77 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.4 LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter ↗
   2026-08-24 CVE-2026-75982 Missing Authorization Affects <= 4.4.4 Patched in 4.4.5
2. Medium · 4.3 LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.4 - Authenticated (Subscriber+) Information Exposure ↗
   2026-08-13 CVE-2026-12976 Exposure of Sensitive Information to an Unauthorized Actor Affects < 4.4.4 Patched in 4.4.4
3. Medium · 6.4 LearnPress <= 4.4.3 - Authenticated (Instructor+) Server-Side Request Forgery ↗
   2026-08-06 CVE-2026-12971 Server-Side Request Forgery (SSRF) Affects <= 4.4.3 Patched in 4.4.4
4. High · 7.5 LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints ↗
   2026-07-16 CVE-2026-13765 Missing Authorization Affects <= 4.4.1 Patched in 4.4.2
5. Medium · 6.4 LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attribute ↗
   2026-06-30 CVE-2026-12732 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.4.0 Patched in 4.4.1
6. Medium · 6.5 LearnPress <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameter ↗
   2026-06-30 CVE-2026-11988 Authorization Bypass Through User-Controlled Key Affects <= 4.3.9.1 Patched in 4.4.0
7. Medium · 6.1 LearnPress <= 4.4.0 - Reflected Cross-Site Scripting ↗
   2026-06-29 CVE-2026-12970 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.4.0 Patched in 4.4.1
8. Medium · 5.3 LearnPress <= 4.3.6 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure ↗
   2026-06-27 CVE-2026-8383 Missing Authorization Affects <= 4.3.6 Patched in 4.3.7
9. Medium · 5.3 LearnPress <= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parameters ↗
   2026-06-05 CVE-2026-8502 Missing Authorization Affects <= 4.3.6 Patched in 4.3.7
10. Medium · 6.1 LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.6 - Reflected Cross-Site Scripting ↗
    2026-06-01 CVE-2026-48865 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.3.6 Patched in 4.3.7
11. Medium · 4.3 LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter ↗
    2026-05-13 CVE-2026-7648 Authorization Bypass Through User-Controlled Key Affects <= 4.3.5 Patched in 4.3.6
12. Critical · 9.1 LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion ↗
    2026-04-13 CVE-2026-4365 Missing Authorization Affects <= 4.3.2.8 Patched in 4.3.3
13. Medium · 6.4 LearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute ↗
    2026-04-07 CVE-2026-4333 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.3.3 Patched in 4.3.4
14. Medium · 4.3 LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion ↗
    2026-03-23 CVE-2026-3225 Missing Authorization Affects <= 4.3.2.8 Patched in 4.3.3
15. Medium · 4.3 LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering ↗
    2026-03-11 CVE-2026-3226 Missing Authorization Affects <= 4.3.2.8 Patched in 4.3.3
16. Medium · 5.3 LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API ↗
    2026-01-19 CVE-2025-14798 Missing Authorization Affects <= 4.3.2.4 Patched in 4.3.2.5
17. Medium · 5.4 LearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion ↗
    2026-01-06 CVE-2025-14802 Authorization Bypass Through User-Controlled Key Affects <= 4.3.2.1 Patched in 4.3.2.2
18. Medium · 5.3 LearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification ↗
    2026-01-05 CVE-2025-13964 Missing Authorization Affects <= 4.3.2 Patched in 4.3.2.1
19. Medium · 5.3 LearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposure ↗
    2025-12-15 CVE-2025-13956 Missing Authorization Affects <= 4.3.1 Patched in 4.3.2
20. Medium · 6.4 LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social ↗
    2025-12-15 CVE-2025-14387 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.3.1 Patched in 4.3.2
21. Medium · 5.3 LearnPress <= 4.2.9.4 - Missing Authorization ↗
    2025-11-30 CVE-2025-66054 Missing Authorization Affects <= 4.2.9.4 Patched in 4.3.0
22. Medium · 5.3 LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure ↗
    2025-11-20 CVE-2025-11368 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.2.9.4 Patched in 4.3.0
23. Medium · 6.4 LearnPress <= 4.2.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-11-06 CVE-2025-67536 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.9.4 Patched in 4.3.0
24. Medium · 6.5 LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation ↗
    2025-10-17 CVE-2025-11372 Missing Authorization Affects <= 4.2.9.3 Patched in 4.2.9.4
25. Medium · 5.3 LearnPress <= 4.2.7.5 - Missing Authorization ↗
    2025-03-27 CVE-2025-22739 Missing Authorization Affects <= 4.2.7.5 Patched in 4.2.7.6
26. Medium · 4.4 LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-01-29 CVE-2024-13127 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.7.5 Patched in 4.2.7.5.1
27. Medium · 4.4 LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-01-29 CVE-2024-13128 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.7.5 Patched in 4.2.7.5.1
28. Medium · 6.4 LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name ↗
    2025-01-24 CVE-2024-13599 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.7.5 Patched in 4.2.7.5.1
29. Medium · 5.4 LearnPress <= 4.2.7.1 - Authenticated (Subscriber+) Open Redirect ↗
    2025-01-24 CVE-2025-24740 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 4.2.7.1 Patched in 4.2.7.2
30. Medium · 5.3 LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API ↗
    2024-12-09 CVE-2024-11868 Improper Access Control Affects <= 4.2.7.3 Patched in 4.2.7.4
31. Medium · 4.4 LearnPress <= 4.2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-11-21 CVE-2024-10010 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.7.1 Patched in 4.2.7.2
32. Medium · 4.4 LearnPress <= 4.2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-11-21 CVE-2024-9881 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.7.1 Patched in 4.2.7.2
33. Critical · 10.0 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields' ↗
    2024-09-11 CVE-2024-8529 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.2.7 Patched in 4.2.7.1
34. Critical · 10.0 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields' ↗
    2024-09-11 CVE-2024-8522 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.2.7 Patched in 4.2.7.1
35. High · 8.8 LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter ↗
    2024-08-07 CVE-2024-7548 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.2.6.9.3 Patched in 4.2.6.9.4
36. Medium · 4.3 LearnPress <= 4.2.6.8.2 - Cross-Site Request Forgery ↗
    2024-08-01 CVE-2024-39641 Cross-Site Request Forgery (CSRF) Affects <= 4.2.6.8.2 Patched in 4.2.6.9
37. Medium · 5.4 LearnPress <= 4.2.6.8.2 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2024-08-01 CVE-2024-39642 Authorization Bypass Through User-Controlled Key Affects <= 4.2.6.8.2 Patched in 4.2.6.9
38. High · 8.8 LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion ↗
    2024-07-24 CVE-2024-6589 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 4.2.6.8.2 Patched in 4.2.6.9
39. Medium · 5.3 LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration Bypass ↗
    2024-07-01 CVE-2024-6088 Missing Authorization Affects <= 4.2.6.8.1 Patched in 4.2.6.8.2
40. Medium · 5.3 LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration ↗
    2024-07-01 CVE-2024-6099 Unprotected Alternate Channel Affects <= 4.2.6.8.1 Patched in 4.2.6.8.2
41. Medium · 5.3 LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API ↗
    2024-06-04 CVE-2024-5483 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.2.6.8 Patched in 4.2.6.8.1
42. Medium · 6.4 LearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter ↗
    2024-05-21 CVE-2024-4971 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.6.6 Patched in 4.2.6.7
43. Medium · 6.4 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameter ↗
    2024-05-09 CVE-2024-4277 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.6.5 Patched in 4.2.6.6
44. Critical · 9.8 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection ↗
    2024-05-09 CVE-2024-4434 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.2.6.5 Patched in 4.2.6.6
45. Medium · 5.3 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration ↗
    2024-05-09 CVE-2024-4444 Unprotected Alternate Channel Affects <= 4.2.6.5 Patched in 4.2.6.6
46. High · 8.8 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload ↗
    2024-05-09 CVE-2024-4397 Unrestricted Upload of File with Dangerous Type Affects <= 4.2.6.5 Patched in 4.2.6.6
47. Medium · 6.4 LearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-04-18 CVE-2024-3560 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.6.4 Patched in 4.2.6.5
48. Medium · 6.5 LearnPress <= 4.2.6.3 - Insecure Direct Object Reference ↗
    2024-04-04 CVE-2024-1289 Improper Authorization Affects <= 4.2.6.3 Patched in 4.2.6.4
49. High · 8.8 LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation ↗
    2024-04-04 CVE-2024-2115 Cross-Site Request Forgery (CSRF) Affects <= 4.0.0 Patched in 4.0.1
50. Medium · 4.4 LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting ↗
    2024-04-04 CVE-2024-1463 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.6.3 Patched in 4.2.6.4
51. High · 8.1 LearnPress <= 4.2.5.7 - Command Injection ↗
    2024-01-03 CVE-2023-6634 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Affects <= 4.2.5.7 Patched in 4.2.5.8
52. Medium · 4.3 LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure ↗
    2024-01-02 CVE-2023-6223 Authorization Bypass Through User-Controlled Key Affects <= 4.2.5.7 Patched in 4.2.5.8
53. Critical · 9.8 LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by ↗
    2024-01-02 CVE-2023-6567 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.2.5.7 Patched in 4.2.5.8
54. Medium · 6.1 LearnPress <= 4.2.5.3 - Reflected Cross-Site Scripting via add_internal_scripts_to_head ↗
    2023-11-07 CVE-2023-5558 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 4.2.5.4 Patched in 4.2.5.4
55. Medium · 5.4 LearnPress <= 4.2.3 - Missing Authorization ↗
    2023-07-06 Missing Authorization Affects < 4.2.3.1 Patched in 4.2.3.1
56. Medium · 5.4 LearnPress <= 4.2.3 - Missing Authorization ↗
    2023-07-04 CVE-2023-36516 Missing Authorization Affects <= 4.2.3 Patched in 4.2.3.1
57. High · 7.3 LearnPress <= 4.2.3 - Missing Authorization to Information Exposure ↗
    2023-07-04 CVE-2023-36515 Missing Authorization Affects <= 4.2.3 Patched in 4.2.3.1
58. Critical · 9.8 LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection ↗
    2023-01-20 CVE-2022-45808 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.1.7.3.2 Patched in 4.2.0
59. Critical · 9.8 LearnPress <= 4.1.7.3.2 - Unauthenticated Local File Inclusion ↗
    2023-01-20 CVE-2022-47615 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 4.1.7.3.2 Patched in 4.2.0
60. High · 8.8 LearnPress <= 4.1.7.3.2 - Authenticated (Subscriber+) SQL Injection ↗
    2022-12-20 CVE-2022-45820 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.1.7.3.2 Patched in 4.2.0
61. Critical · 9.8 LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection ↗
    2022-10-03 CVE-2022-3360 Deserialization of Untrusted Data Affects <= 4.1.7.1 Patched in 4.1.7.2
62. Medium · 6.1 LearnPress – WordPress LMS Plugin <= 4.1.6.7 - Reflected Cross-Site Scripting ↗
    2022-07-05 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.1.6.7 Patched in 4.1.6.8
63. Medium · 6.1 LearnPress – WordPress LMS Plugin <= 4.1.6.5 - Reflected Cross-Site Scripting ↗
    2022-06-14 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.1.6.5 Patched in 4.1.6.6
64. Medium · 6.1 LearnPress <= 4.1.5 - Reflected Cross-Site Scripting ↗
    2022-03-16 CVE-2022-0271 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 4.1.6 Patched in 4.1.6
65. Medium · 4.3 LearnPress <= 4.1.4.1 - Arbitrary Image Renaming ↗
    2022-01-26 CVE-2022-0377 External Control of File Name or Path Affects <= 4.1.4.1 Patched in 4.1.5
66. Critical · 9.8 LearnPress <= 4.1.3 - Authenticated SQL Injection ↗
    2021-11-09 CVE-2021-24951 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 4.1.4 Patched in 4.1.4
67. Medium · 5.5 LearnPress <= 4.1.3.1 - Stored Cross-Site Scripting via $custom_profile ↗
    2021-10-18 CVE-2021-39348 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.1.3.1 Patched in 4.1.3.2
68. Medium · 4.8 LearnPress <= 4.1.3 - Authenticated Stored Cross-Site Scripting ↗
    2021-09-20 CVE-2021-24702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.1.3 Patched in 4.1.3.1
69. High · 8.8 LearnPress <= 3.2.6.7 - SQL Injection ↗
    2021-07-19 CVE-2020-6010 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.2.6.7 Patched in 3.2.6.8
70. High · 8.8 LearnPress – WordPress LMS Plugin <= 3.2.7.2 - SQL Injection ↗
    2020-10-05 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.2.7.2 Patched in 3.2.7.3
71. Medium · 6.1 LearnPress <= 3.2.7.2 - Reflected Cross-Site Scripting ↗
    2020-09-08 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.2.7.3 Patched in 3.2.7.3
72. High · 8.1 LearnPress <= 3.2.6.8 - Privilege Escalation via accept-to-be-teacher action parameter ↗
    2020-04-20 CVE-2020-11511 Improper Privilege Management Affects <= 3.2.6.8 Patched in 3.2.6.9
73. High · 7.1 LearnPress <= 3.2.6.8 - Authenticated Page Creation and Status Modification ↗
    2020-04-19 CVE-2020-11510 Improper Privilege Management Affects <= 3.2.6.8 Patched in 3.2.6.9
74. High · 7.1 LearnPress <= 3.2.6.6 - Privilege Escalation ↗
    2020-03-16 CVE-2020-7916 Improper Privilege Management Affects <= 3.2.6.6 Patched in 3.2.6.8
75. High · 7.2 LearnPress <= 3.0.12 - Authenticated SQL Injection ↗
    2018-11-09 CVE-2018-16175 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.0.12 Patched in 3.1.0
76. Medium · 6.1 LearnPress <= 3.0.12 - Open Redirect ↗
    2018-11-09 CVE-2018-16174 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 3.0.12 Patched in 3.1.0
77. Medium · 6.1 LearnPress <= 3.0.12 - Cross-Site Scripting ↗
    2018-11-09 CVE-2018-16173 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.12 Patched in 3.1.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 128 languages, 3 at 90% or more

Plus 104 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-05-15 80K+ → 70K+ down after 223 days in tier
2. 2025-10-04 90K+ → 80K+ down after 818 days in tier
3. 2023-07-09 100K+ → 90K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Tutor LMS – eLearning and online course solution 100K+ installs · 4.4★ · 5 shared tags B
• MasterStudy LMS WordPress Plugin – for Online Courses and Education 10K+ installs · 4.5★ · 5 shared tags A
• StepUp LMS — installs · 3.6★ · 5 shared tags B
• LearnPress – Course Wishlist 20K+ installs · 3.9★ · 4 shared tags B
• LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes 10K+ installs · 4.8★ · 4 shared tags A
• LearnPress – Prerequisites Courses 6K+ installs · 4.0★ · 4 shared tags B

Embed this report card

Drop a live Pulse card for LearnPress – WordPress LMS Plugin for Create and Sell Online Courses into a readme, a review or a deck. It updates itself.

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses: 70K+ active installs, 4.3★ (596 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/learnpress