Advisories · Technology
thimpress LearnPress – Backup & Migration Tool.
Every CVE that names thimpress LearnPress – Backup & Migration Tool among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.6 Medium
LearnPress – Backup & Migration Tool <= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload
- thimpress LearnPress – Backup & Migration Tool
- Insecure deserialization
- CVSS 4.9 Medium
LearnPress <= 4.1.4 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'import-user-file' Parameter
- thimpress LearnPress – Backup & Migration Tool
- Path traversal
- CVSS 4.8 Medium
LearnPress Export Import <= 4.1.0 - Missing Authentication to Unauthenticated Migrated Course Deletion
- thimpress LearnPress – Backup & Migration Tool
- Broken access control
- CVSS 6.1 Medium
LearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site Scripting
- thimpress LearnPress – Backup & Migration Tool
- Cross-site scripting (XSS)