CVE-2026-82024: LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated

The LearnPress WordPress plugin before version 4.4.6 has a stored cross-site scripting vulnerability (XSS, a type of attack where malicious code is injected into a website and stored so it runs in users' browsers). Instructors can exploit this by submitting unfiltered code into quiz answer title fields, which then executes when students, other instructors, or administrators view the quiz. This allows attackers to run arbitrary JavaScript (code that performs actions) in victims' browsers without their knowledge.