WordPress Vulnerabilities – December 1 to December 15, 2025

Introduction: Keeping your WordPress site secure is essential. In this post, you’ll find a summary of the latest plugin vulnerabilities discovered over the past two weeks, so you can take action and stay protected.

Fox LMS – WordPress LMS Plugin

Summary: This plugin is vulnerable to privilege escalation, allowing attackers to gain higher-level permissions than intended.Affected Versions: Up to and including 1.0.5.1Source: View details

LearnPress – WordPress LMS Plugin

Summary: Vulnerable to unauthorized access of data due to a missing capability check on the statistic function.Affected Versions: Up to and including 4.3.1Source: View details

Conclusion: Make sure to update any affected plugins and monitor your site regularly. Staying informed is one of the best ways to protect your WordPress installationConclusion: Make sure to update any affected plugins and monitor your site regularly. Staying informed is one of the best ways to protect your WordPress installation.