Login Request a demo
TH
Vendor
ThimPress
20 products with CVEs on record
139
CVEs
0
On KEV
13
New 30D
Products
LE
LearnPress
ThimPress
9.8
58 CVEs0 on KEV8 new
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
9.8
24 CVEs0 on KEV5 new
WH
WP Hotel Booking
thimpress
9.8
20 CVEs0 on KEV0 new
WP
WP Pipes
ThimPress
9.8
9 CVEs0 on KEV0 new
ED
Eduma
ThimPress
7.5
3 CVEs0 on KEV0 new
LB
LearnPress – Backup & Migration Tool
thimpress
6.6
3 CVEs0 on KEV0 new
LE
LearnPress Export Import
ThimPress
7.5
3 CVEs0 on KEV0 new
TC
Thim Core
ThimPress
8.8
3 CVEs0 on KEV0 new
RE
RealPress
ThimPress
9.3
2 CVEs0 on KEV0 new
SA
Sailing
ThimPress
7.5
2 CVEs0 on KEV0 new
TE
Thim Elementor Kit
ThimPress
6.5
2 CVEs0 on KEV0 new
WE
WP Events Manager
ThimPress
8.8
2 CVEs0 on KEV0 new
BU
BuilderPress
ThimPress
9.8
1 CVEs0 on KEV0 new
CO
Coaching
ThimPress.
7.1
1 CVEs0 on KEV0 new
FW
FundPress – WordPress Donation Plugin
thimpress
5.3
1 CVEs0 on KEV0 new
LC
LearnPress – Course Review
ThimPress
6.5
1 CVEs0 on KEV0 new
LS
LearnPress – Sepay Payment
ThimPress
7.5
1 CVEs0 on KEV0 new
RE
Resca
ThimPress
7.1
1 CVEs0 on KEV0 new
TB
Thim Blocks
thimpress
6.5
1 CVEs0 on KEV0 new
TK
Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor
thimpress
5.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115598
New
LE
LearnPress
ThimPress
5.3
0%
Oct 26WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
CVE-2026-115597
New
LE
LearnPress
ThimPress
5.4
0%
Oct 26WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
CVE-2026-113353
LE
LearnPress
ThimPress
5.4
0%
Oct 20LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
CVE-2026-110363
LE
LearnPress
ThimPress
5.4
0%
Oct 19WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
CVE-2026-107744
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
6.5
0%
Oct 17LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action
CVE-2026-104736
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
9.8
1%
Oct 17LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter
CVE-2026-109208
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
7.2
0%
Oct 17LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters
CVE-2026-104670
LE
LearnPress
ThimPress
7.1
0%
Oct 6WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105397
LE
LearnPress
ThimPress
5.4
0%
Oct 5LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation
CVE-2026-92538
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
6.1
0%
Oct 3LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter
CVE-2026-39717
LE
LearnPress
ThimPress
4.3
0%
Oct 2WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
CVE-2026-104403
LE
LearnPress
ThimPress
5.3
0%
Oct 2WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-93882
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
7.5
0%
Oct 1LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter
CVE-2026-12230
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
6.4
0%
Sep 8LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'
CVE-2026-82024
LE
LearnPress
ThimPress
5.4
0%
Sep 3LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles
CVE-2026-82023
LE
LearnPress
ThimPress
4.3
0%
Sep 3LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
CVE-2026-77823
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
4.9
0%
Sep 1LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
CVE-2026-75982
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
4.4
0%
Aug 25LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter
CVE-2026-66458
RE
RealPress
ThimPress
9.3
0%
Aug 13WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability
CVE-2026-15464
WH
WP Hotel Booking
thimpress
6.4
0%
Jul 24WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute
CVE-2026-57397
CO
Coaching
ThimPress.
7.1
0%
Jul 23WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-15094
WH
WP Hotel Booking
thimpress
6.1
1%
Jul 17WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter
CVE-2026-13765
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
7.5
1%
Jul 17LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints
CVE-2026-11901
WH
WP Hotel Booking
thimpress
5.3
0%
Jul 11WP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN Handler
CVE-2026-11392
WH
WP Hotel Booking
thimpress
6.1
0%
Jul 10WP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date' and 'check_out_date' Parameters
CVE-2026-12732
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
6.4
0%
Jul 1LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attribute
CVE-2026-11988
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
6.5
0%
Jul 1LearnPress <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameter
CVE-2026-8502
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
5.3
1%
Jun 6LearnPress <= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parameters
CVE-2026-7566
LB
LearnPress – Backup & Migration Tool
thimpress
6.6
0%
Jun 6LearnPress – Backup & Migration Tool <= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload
CVE-2026-7565
LB
LearnPress – Backup & Migration Tool
thimpress
4.9
1%
Jun 6LearnPress <= 4.1.4 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'import-user-file' Parameter
CVE-2025-53346
TC
Thim Core
ThimPress
4.3
0%
Jun 2WordPress Thim Core Plugin <= 2.3.3 - Broken Access Control Vulnerability
CVE-2025-53345
TC
Thim Core
ThimPress
8.8
0%
Jun 2WordPress Thim Core plugin <= 2.3.3 - Arbitrary plugin Installation vulnerability
CVE-2026-48865
LE
LearnPress
ThimPress
7.1
0%
Jun 1WordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-7648
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
4.3
0%
May 14LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter
CVE-2026-4650
FW
FundPress – WordPress Donation Plugin
thimpress
5.3
0%
May 2FundPress <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX Handler
CVE-2026-4365
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
9.1
1%
Apr 14LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion
CVE-2026-4333
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
6.4
0%
Apr 8LearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute
CVE-2026-25002
LS
LearnPress – Sepay Payment
ThimPress
7.5
0%
Mar 25WordPress LearnPress – Sepay Payment plugin <= 4.0.0 - Broken Authentication vulnerability
CVE-2026-3225
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
4.3
0%
Mar 23LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion
CVE-2026-27065
BU
BuilderPress
ThimPress
9.8
0%
Mar 19WordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability
CVE-2026-1870
TK
Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor
thimpress
5.3
0%
Mar 14Thim Kit for Elementor <= 1.3.7 - Missing Authorization to Unauthenticated Private Course Disclosure
CVE-2026-3226
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
4.3
0%
Mar 12LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering
CVE-2026-1787
LB
LearnPress – Backup & Migration Tool
thimpress
4.8
0%
Feb 21LearnPress Export Import <= 4.1.0 - Missing Authentication to Unauthenticated Migrated Course Deletion
CVE-2026-27050
RE
RealPress
ThimPress
5.4
0%
Feb 19WordPress RealPress plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-24361
LC
LearnPress – Course Review
ThimPress
6.5
0%
Jan 22WordPress LearnPress – Course Review plugin <= 4.1.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-14798
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
5.3
0%
Jan 20LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API
CVE-2025-13725
TB
Thim Blocks
thimpress
6.5
0%
Jan 17Gutenberg Thim Blocks <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read via 'iconSVG' Parameter
CVE-2025-14075
WH
WP Hotel Booking
thimpress
5.3
0%
Jan 17WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter
CVE-2025-14802
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
5.4
0%
Jan 7LearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion
CVE-2025-13964
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
5.3
0%
Jan 6LearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification
CVE-2025-53344
TC
Thim Core
ThimPress
4.3
0%
Jan 5WordPress Thim Core Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-66054
LE
LearnPress
ThimPress
7.5
0%
Dec 18WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability
CVE-2025-13956
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
5.3
1%
Dec 16LearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposure
CVE-2025-14387
LW
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
thimpress
6.4
0%
Dec 15LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social
CVE-2025-63013
WH
WP Hotel Booking
ThimPress
4.3
0%
Dec 9WordPress WP Hotel Booking plugin <= 2.2.7 - Sensitive Data Exposure vulnerability
CVE-2025-63012
WH
WP Hotel Booking
ThimPress
4.3
0%
Dec 9WordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-63011
WH
WP Hotel Booking
ThimPress
5.9
0%
Dec 9WordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67594
TE
Thim Elementor Kit
ThimPress
4.3
0%
Dec 9WordPress Thim Elementor Kit plugin <= 1.3.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-67573
SA
Sailing
ThimPress
5.3
0%
Dec 9WordPress Sailing theme < 4.4.6 - Broken Access Control vulnerability
CVE-2025-67536
LE
LearnPress
ThimPress
6.5
0%
Dec 9WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerability