CVE-2026-7565

MediumCVSS 4.9

Published: 06/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.65%

47th percentile - higher than 47% of all known CVEs

Summary

The LearnPress – Backup & Migration Tool plugin for WordPress up to version 4.1.4 is vulnerable to arbitrary file read via directory traversal through the 'import-user-file' parameter. Authenticated attackers with administrator-level access and above can read the contents of arbitrary files on the server, which may contain sensitive information.

Risk Assessment

Administrators with access to the WordPress panel can read sensitive files such as configuration files, credentials, or backups, potentially leading to data disclosure.

Recommendation

Update the LearnPress – Backup & Migration Tool plugin to the latest patched version. Restrict access to the import functionality to trusted administrators only.

Other vulnerabilities in LearnPress – Backup & Migration Tool

CVE-2026-7566Medium
The LearnPress – Backup & Migration Tool plugin for WordPress up to version 4.1.4 is vulnerable to PHP object injection via deserialization of untrusted input. Exploitation requires administrator access and a POP chain in another installed plugin or theme.

Original NVD description (English source)

The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Traversal in all versions up to, and including, 4.1.4 via the 'import-user-file' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS