Critical Flaws Found in Popular LearnPress LMS Plugin for WordPress Vulnerability Critical Flaws Found in Popular LearnPress LMS Plugin for WordPress Do Son May 12, 2024 0 CVE-2024-4434 (CVSS score of 9.8), is an unauthenticated time-based SQL Injection through the ‘term_id’ parameter.