# ThimPress LearnPress.

Every CVE that names ThimPress LearnPress among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WordPress LearnPress plugin <= 4.4.12 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-52713.md)
  `CVE-2026-52713` · CVE record: ThimPress LearnPress · CVSS 5.4 Medium · Not analysed yet · Published 7 Nov 2026 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-42690.md)
  `CVE-2026-42690` · CVE record: ThimPress LearnPress · CVSS 5.4 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-115599.md)
  `CVE-2026-115599` · CVE record: ThimPress LearnPress · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2026 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-115598.md)
  `CVE-2026-115598` · CVE record: ThimPress LearnPress · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-115597.md)
  `CVE-2026-115597` · CVE record: ThimPress LearnPress · CVSS 5.4 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Broken access control
- [LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers](https://agentprime.io/advisories/CVE-2026-113353.md)
  `CVE-2026-113353` · CVE record: ThimPress LearnPress · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-110363.md)
  `CVE-2026-110363` · CVE record: ThimPress LearnPress · CVSS 5.4 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-104670.md)
  `CVE-2026-104670` · CVE record: ThimPress LearnPress · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation](https://agentprime.io/advisories/CVE-2026-105397.md)
  `CVE-2026-105397` · CVE record: ThimPress LearnPress · CVSS 5.1 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-39717.md)
  `CVE-2026-39717` · CVE record: ThimPress LearnPress · CVSS 4.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability](https://agentprime.io/advisories/CVE-2026-104403.md)
  `CVE-2026-104403` · CVE record: ThimPress LearnPress · CVSS 5.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Broken access control
- [LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles](https://agentprime.io/advisories/CVE-2026-82024.md)
  `CVE-2026-82024` · CVE record: ThimPress LearnPress · CVSS 5.1 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Cross-site scripting (XSS)
- [LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert](https://agentprime.io/advisories/CVE-2026-82023.md)
  `CVE-2026-82023` · CVE record: ThimPress LearnPress · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-48865.md)
  `CVE-2026-48865` · CVE record: ThimPress LearnPress · CVSS 7.1 High · Not analysed yet · Published 1 Jun 2026 · Tags: Cross-site scripting (XSS)
- [WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2025-66054.md)
  `CVE-2025-66054` · CVE record: ThimPress LearnPress · CVSS 7.5 High · Not analysed yet · Published 18 Dec 2025 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2025-67536.md)
  `CVE-2025-67536` · CVE record: ThimPress LearnPress · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [WordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2025-22739.md)
  `CVE-2025-22739` · CVE record: ThimPress LearnPress · CVSS 5.3 Medium · Not analysed yet · Published 27 Mar 2025 · Tags: Broken access control
- [WordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability](https://agentprime.io/advisories/CVE-2025-24740.md)
  `CVE-2025-24740` · CVE record: ThimPress LearnPress · CVSS 4.7 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: Open redirect
- [WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2024-39641.md)
  `CVE-2024-39641` · CVE record: ThimPress LearnPress · CVSS 4.3 Medium · Not analysed yet · Published 26 Aug 2024 · Tags: Cross-site request forgery (CSRF)
- [WordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability](https://agentprime.io/advisories/CVE-2024-39642.md)
  `CVE-2024-39642` · CVE record: ThimPress LearnPress · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2024 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2023-36515.md)
  `CVE-2023-36515` · CVE record: ThimPress LearnPress · CVSS 7.3 High · Not analysed yet · Published 19 Jun 2024 · Tags: Broken access control
- [WordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2023-36516.md)
  `CVE-2023-36516` · CVE record: ThimPress LearnPress · CVSS 7.6 High · Not analysed yet · Published 19 Jun 2024 · Tags: Broken access control
- [ThimPress LearnPress: SQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with…](https://agentprime.io/advisories/CVE-2018-16175.md)
  `CVE-2018-16175` · CVE record: ThimPress LearnPress · No CVSS score · Not analysed yet · Published 9 Jan 2019
- [ThimPress LearnPress: Open redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers…](https://agentprime.io/advisories/CVE-2018-16174.md)
  `CVE-2018-16174` · CVE record: ThimPress LearnPress · No CVSS score · Not analysed yet · Published 9 Jan 2019
- [ThimPress LearnPress: Cross-site scripting vulnerability in LearnPress prior to version 3.1.0 allows remote…](https://agentprime.io/advisories/CVE-2018-16173.md)
  `CVE-2018-16173` · CVE record: ThimPress LearnPress · No CVSS score · Not analysed yet · Published 9 Jan 2019

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=thimpress-learnpress>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/thimpress-learnpress/>. Everything for agents: <https://agentprime.io/llms.txt>.