[ Vendor · 11 CVEs ]
ThimPress
CVEs affecting ThimPress published in the last 30 days, plus any ThimPress CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113353 | 20 Oct 2026 | CVSS 5.4 | ThimPress LearnPressLearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor… | |
| CVE-2026-110363 | 19 Oct 2026 | CVSS 5.4 | ThimPress LearnPressMissing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This… | |
| CVE-2026-107744 | 17 Oct 2026 | CVSS 6.5 | thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online CoursesThe LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions… | |
| CVE-2026-104736 | 17 Oct 2026 | CVSS 9.8 | thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online CoursesThe LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted… | |
| CVE-2026-109208 | 17 Oct 2026 | CVSS 7.2 | thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online CoursesThe LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | |
| CVE-2026-104670 | 6 Oct 2026 | CVSS 7.1 | ThimPress LearnPressUnauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions. | |
| CVE-2026-105397 | 5 Oct 2026 | CVSS 5.4 | ThimPress LearnPressLearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject… | |
| CVE-2026-92538 | 3 Oct 2026 | CVSS 6.1 | thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online CoursesThe LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site… | |
| CVE-2026-39717 | 2 Oct 2026 | CVSS 4.3 | ThimPress LearnPressMissing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This… | |
| CVE-2026-104403 | 2 Oct 2026 | CVSS 5.3 | ThimPress LearnPressAuthorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-93882 | 1 Oct 2026 | CVSS 7.5 | thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online CoursesThe LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in… |