The LearnPress – Backup & Migration Tool plugin for WordPress contains a directory traversal flaw in the 'import-user-file' parameter that allows authenticated users with administrator or higher privileges to read arbitrary files on the server. This flaw enables the disclosure of sensitive data such as configuration files, credentials, or other private documents, thereby compromising the confidentiality of the system. The weakness is a classic Path Traversal error (CWE‑22).

All installations of the thimpress LearnPress – Backup & Migration Tool plugin with version 4.1.4 or earlier are affected. Administrators who have access to the import functionality can exploit the vulnerability.

The CVSS score of 4.9 indicates a moderate impact when an attacker has the necessary admin-level credentials. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, which suggests that widespread exploitation may not yet be observed. Attackers would need to be authenticated and possess appropriate permissions to reach the import functionality, making this a privileged exploitation scenario.