CVE-2020-11511

HIGH 8.1CVE-2020-11511 · Published 30/07/2021 · updated 17/06/2026

In short

CVE-2020-11511 is a HIGH (CVSS 8.1) vulnerability affecting learnpress (thimpress).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.2% of all vulnerabilities.
Fix: update to 3.2.6.9 or later.

Package	Affected versions	Patched versions
learnpress thimpress	`< 3.2.6.9`	`3.2.6.9`

Description

The LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the privileges of any user to LP Instructor via the accept-to-be-teacher action parameter.

References

packetstormsecurity.com/files/163538/WordPress-LearnPress-Privilege-Escalation.html · Exploit
cwe.mitre.org/data/definitions/862.html · Third Party Advisory
wordpress.org/plugins/learnpress · Product
wordfence.com/blog/2020/04/high-severity-vulnerabilities-patched-in-learnpress · Exploit

More vulnerabilities in learnpress

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

learnpress

thimpress

< 3.2.6.9

3.2.6.9

More vulnerabilities in learnpress

See all →