Skip to content
OpenAdvisories
High · 7.5 CVE-2026-25002 EUVD-2026-15610GHSA-83pv-9pxh-7c32

WordPress LearnPress – Sepay Payment plugin <= 4.0.0 - Broken Authentication vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in ThimPress LearnPress – Sepay Payment learnpress-sepay-payment allows Authentication Abuse.This issue affects LearnPress – Sepay Payment: from n/a through <= 4.0.0.

Affected products

VendorProductAffectedFixed
ThimPress LearnPress – Sepay Payment ≤ 4.0.0 —

References