Advisories · Technology

ThimPress LearnPress.

Every CVE that names ThimPress LearnPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-52713 CVE record

CVSS 5.4 Medium

WordPress LearnPress plugin <= 4.4.12 - Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 7 Nov 2026
CVE-2026-42690 CVE record

CVSS 5.4 Medium

WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-115599 CVE record

CVSS 7.5 High

WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-115598 CVE record

CVSS 5.3 Medium

WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 26 Oct 2026
CVE-2026-115597 CVE record

CVSS 5.4 Medium

WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 26 Oct 2026
CVE-2026-113353 CVE record

CVSS 5.3 Medium

LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
- ThimPress LearnPress
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-110363 CVE record

CVSS 5.4 Medium

WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 19 Oct 2026
CVE-2026-104670 CVE record

CVSS 7.1 High

WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability
- ThimPress LearnPress
- Cross-site scripting (XSS)
Not analysed yet 6 Oct 2026
CVE-2026-105397 CVE record

CVSS 5.1 Medium

LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation
- ThimPress LearnPress
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2026
CVE-2026-39717 CVE record

CVSS 4.3 Medium

WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 2 Oct 2026
CVE-2026-104403 CVE record

CVSS 5.3 Medium

WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 2 Oct 2026
CVE-2026-82024 CVE record

CVSS 5.1 Medium

LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles
- ThimPress LearnPress
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2026
CVE-2026-82023 CVE record

CVSS 5.3 Medium

LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
- ThimPress LearnPress
- Broken access control
Not analysed yet 3 Sept 2026
CVE-2026-48865 CVE record

CVSS 7.1 High

WordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerability
- ThimPress LearnPress
- Cross-site scripting (XSS)
Not analysed yet 1 Jun 2026
CVE-2025-66054 CVE record

CVSS 7.5 High

WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 18 Dec 2025
CVE-2025-67536 CVE record

CVSS 6.5 Medium

WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerability
- ThimPress LearnPress
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2025
CVE-2025-22739 CVE record

CVSS 5.3 Medium

WordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 27 Mar 2025
CVE-2025-24740 CVE record

CVSS 4.7 Medium

WordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability
- ThimPress LearnPress
- Open redirect
Not analysed yet 27 Jan 2025
CVE-2024-39641 CVE record

CVSS 4.3 Medium

WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability
- ThimPress LearnPress
- Cross-site request forgery (CSRF)
Not analysed yet 26 Aug 2024
CVE-2024-39642 CVE record

CVSS 6.5 Medium

WordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2023-36515 CVE record

CVSS 7.3 High

WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 19 Jun 2024
CVE-2023-36516 CVE record

CVSS 7.6 High

WordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability
- ThimPress LearnPress
- Broken access control
Not analysed yet 19 Jun 2024
CVE-2018-16175 CVE record

ThimPress LearnPress: SQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with…
- ThimPress LearnPress
Not analysed yet 9 Jan 2019
CVE-2018-16174 CVE record

ThimPress LearnPress: Open redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers…
- ThimPress LearnPress
Not analysed yet 9 Jan 2019
CVE-2018-16173 CVE record

ThimPress LearnPress: Cross-site scripting vulnerability in LearnPress prior to version 3.1.0 allows remote…
- ThimPress LearnPress
Not analysed yet 9 Jan 2019