Skip to content
PluginCanary

LearnPress - WordPress LMS Plugin for Create and Sell Online Courses

by ThimPress · 70,000+ active installs · Checked 3 Nov 2026
Healthy26 Warnings

Healthy: vulnerability published 27 Oct 2026, fixed in 4.4.12.

85/ 100 Canary Score
Sub-scores for LearnPress - WordPress LMS Plugin for Create and Sell Online Courses
Ownership100
Maintenance100
Security60
Support80
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 4.4.12. Update to version 4.4.12 or later.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 26 Oct 2026, fixed in 4.4.12. Update to version 4.4.12 or later.26 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 26 Oct 2026, fixed in 4.4.12. Update to version 4.4.12 or later.26 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 20 Oct 2026, fixed in 4.4.11. Update to version 4.4.11 or later.20 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 4.4.11. Update to version 4.4.11 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 4.4.11. Update to version 4.4.11 or later.16 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 4.4.11. Update to version 4.4.11 or later.16 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 4.4.11. Update to version 4.4.11 or later.16 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 4.4.9.1. Update to version 4.4.9.1 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 4.4.10. Update to version 4.4.10 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 4.4.11. Update to version 4.4.11 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 4.4.8. Update to version 4.4.8 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 4.4.9.1. Update to version 4.4.9.1 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 4.4.9. Update to version 4.4.9 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 15 Sep 2026, fixed in 4.4.7. Update to version 4.4.7 or later.15 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 4.4.7. Update to version 4.4.7 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 4.4.7. Update to version 4.4.7 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 4.4.7. Update to version 4.4.7 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 4.4.7. Update to version 4.4.7 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 4.4.7. Update to version 4.4.7 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 7 Sep 2026, fixed in 4.4.0. Update to version 4.4.0 or later.7 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 4.4.6. Update to version 4.4.6 or later.3 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 4.4.6. Update to version 4.4.6 or later.3 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 4.4.5. Update to version 4.4.5 or later.31 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 24 Aug 2026, fixed in 4.4.5. Update to version 4.4.5 or later.24 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 13 Aug 2026, fixed in 4.4.4. Update to version 4.4.4 or later.13 Aug 2026Evidence
  • InfoSEC-357 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
tunnhn5 Sep 2015 to 20 Nov 2019, 206 commits
phonglq.foobla17 Dec 2018 to 8 Jan 2019, 13 commits
ThimPress14 Mar 2020 to 30 Oct 2026, 772 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
61
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for LearnPress - WordPress LMS Plugin for Create and Sell Online Courses
Q1 20246
Q2 20246
Q3 20247
Q4 20244
Q1 20257
Q2 202511
Q3 20256
Q4 20257
Q1 20267
Q2 20268
Q3 20268
Q4 20265

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Support

80% of 5 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.11 - Missing Authorization5.3<= 4.4.114.4.120
26 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.11 - Missing Authorization5.3<= 4.4.114.4.120
26 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.11 - Missing Authorization4.3<= 4.4.114.4.120
20 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.10 - Missing Authorization4.3<= 4.4.104.4.110
20 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.10 - Authenticated (Custom+) Insecure Direct Object Reference4.3< 4.4.104.4.10n/a
19 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.10 - Missing Authorization4.3<= 4.4.104.4.110
16 Oct 2026LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter9.8<= 4.4.104.4.110
16 Oct 2026LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action6.5<= 4.4.104.4.110
16 Oct 2026LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters7.2<= 4.4.104.4.110
5 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.4.94.4.9.10
5 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9.1 - Authenticated (Instructor+) Stored Cross-Site Scripting6.4<= 4.4.9.14.4.104
2 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.10 - Missing Authorization4.3<= 4.4.104.4.1114
2 Oct 2026LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter6.1<= 4.4.74.4.80
2 Oct 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9 - Unauthenticated Insecure Direct Object Reference5.3<= 4.4.94.4.9.10
30 Sep 2026LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter7.5<= 4.4.84.4.90
15 Sep 2026LearnPress 4.4.3 - 4.4.6 - Unauthenticated Information Exposure5.34.4.3 to 4.4.64.4.70
14 Sep 2026LearnPress <= 4.4.6 - Unauthenticated Information Exposure5.3<= 4.4.64.4.70
14 Sep 2026LearnPress <= 4.4.6 - Reflected Cross-Site Scripting6.1<= 4.4.64.4.70
14 Sep 2026LearnPress <= 4.4.6 - Unauthenticated Information Exposure5.3<= 4.4.64.4.70
14 Sep 2026LearnPress <= 4.4.6 - Unauthenticated Information Exposure5.3<= 4.4.64.4.70
14 Sep 2026LearnPress <= 4.4.6 - Unauthenticated Information Exposure5.3<= 4.4.64.4.70
7 Sep 2026LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'6.4<= 4.3.9.14.4.00
3 Sep 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.5 - Authenticated (Instructor+) Stored Cross-Site Scripting6.4<= 4.4.54.4.60
3 Sep 2026LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.5 - Missing Authorization4.3<= 4.4.54.4.60
31 Aug 2026LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter4.9<= 4.4.44.4.50

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for LearnPress - WordPress LMS Plugin for Create and Sell Online Courses
Q1 20253.9
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0

Average rating rose from 3.9 to 5.0 between Q1 2025 and Q3 2026.

Rating distribution
5 star476
4 star19
3 star11
2 star12
1 star79
Latest low reviews

Momentum

70,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for LearnPress - WordPress LMS Plugin for Create and Sell Online Courses
4 May 20263,829
11 May 20267,807
18 May 202625,497
25 May 20268,499
1 Jun 202627,519
8 Jun 202642,471
15 Jun 202624,216
22 Jun 202623,270
29 Jun 20269,634
6 Jul 202623,781
13 Jul 202612,497
20 Jul 202610,633
27 Jul 202618,693
3 Aug 202626,983
10 Aug 20266,732
17 Aug 202622,251
24 Aug 20269,878
31 Aug 202624,617
7 Sep 202622,858
14 Sep 202627,786
21 Sep 202614,888
28 Sep 202636,337
5 Oct 202628,118
12 Oct 202625,926
19 Oct 202625,481
26 Oct 202630,145
2 Nov 20262,435

Weekly downloads over the last 4 weeks are 4% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LearnPress - Course WishlistScore 91 · 10,000+Sensei LMS CertificatesScore 91 · 4,000+LifterLMS LabsScore 91 · 2,000+LearnPress - bbPress IntegrationScore 91 · 2,000+Custom Template for LearnDashScore 91 · 1,000+

Facts

Version4.4.13
AuthorThimPress
Added7 Jun 2015
Last updated30 Oct 2026
Active installs70,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryLearning Management Systems (LMS) > Course Creation & Management
Tagslms, course, education, elearning, learning management system

Other plugins by this author: WP Events Manager, LearnPress - Course Review, Thim Kit for Elementor - Pre-built Templates & Widgets for Elementor, LearnPress - Course Wishlist, WP Hotel Booking, LearnPress - Prerequisites Courses, LearnPress - Backup & Migration Tool, LearnPress - bbPress Integration, LearnPress - BuddyPress Integration, WP Hotel Booking WooCommerce, WP Events Manager WooCommerce, RealPress - Real Estate Plugin

Questions

Is LearnPress - WordPress LMS Plugin for Create and Sell Online Courses still maintained?

LearnPress - WordPress LMS Plugin for Create and Sell Online Courses was last updated on 30 Oct 2026. Its Canary status is Healthy.

Is LearnPress - WordPress LMS Plugin for Create and Sell Online Courses safe?

LearnPress - WordPress LMS Plugin for Create and Sell Online Courses has no open unpatched vulnerabilities on record. 57 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns LearnPress - WordPress LMS Plugin for Create and Sell Online Courses?

The wordpress.org author is ThimPress. Recent committers: ThimPress, tunnhn, phonglq.foobla, leehld, kendy73. We have recorded no ownership change.

What can I use instead of LearnPress - WordPress LMS Plugin for Create and Sell Online Courses?

Plugins in the same category with a higher Canary Score: LearnPress - Course Wishlist, Sensei LMS Certificates, LifterLMS Labs, LearnPress - bbPress Integration, Custom Template for LearnDash.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue