ThimPress vulnerabilities

CVEs per yearBy the year they were published

1. 20193
2. 20221
3. 20237
4. 202436
5. 202536
6. 202652

Newest CVEs

• CVE-2026-42690

  WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability

  ThimPress · LearnPress

  Medium5.4
• CVE-2026-115599

  WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

  ThimPress · LearnPress

  High7.5
• CVE-2026-115598

  WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

  ThimPress · LearnPress

  Medium5.3
• CVE-2026-115597

  WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

  ThimPress · LearnPress

  Medium5.4
• CVE-2026-113353

  LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers

  ThimPress · LearnPress

  Medium5.3
• CVE-2026-110363

  WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability

  ThimPress · LearnPress

  Medium5.4
• CVE-2026-107744

  LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action

  thimpress · LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

  Medium6.5
• CVE-2026-104736

  LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter

  thimpress · LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

  Critical9.8
• CVE-2026-109208

  LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters

  thimpress · LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

  High7.2
• CVE-2026-104670

  WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability

  ThimPress · LearnPress

  High7.1