CVE-2026-3226: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized email notification triggering d

The LearnPress WordPress plugin (up to version 4.3.2.8) has a security flaw where it sends emails without checking user permissions properly. An authenticated attacker with basic subscriber access can trick the plugin into sending fake emails to administrators and instructors, which could be used for spam, social engineering (manipulating people through deception), or impersonating admin decisions.