CveMateVulnerability intelligence

Thimpress vulnerabilities

149 vulnerabilities

Known vulnerabilities in Thimpress products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 24 products.

Products

24

Learnpress58 vulnerabilities
Learnpress – Wordpress LMS Plugin For Create And Sell Online Courses45 vulnerabilities
Wp Hotel Booking21 vulnerabilities
Wp Pipes9 vulnerabilities
Learnpress Export Import6 vulnerabilities
Eduma4 vulnerabilities
Learnpress – Backup & Migration Tool4 vulnerabilities
Thim Elementor Kit4 vulnerabilities
Learnpress – Wordpress LMS Plugin3 vulnerabilities
Thim Core3 vulnerabilities
Realpress2 vulnerabilities
Sailing2 vulnerabilities
Thim Kit For Elementor – Pre Built Templates & Widgets For Elementor2 vulnerabilities
Wp Events Manager2 vulnerabilities
Builderpress1 vulnerabilities
Coaching1 vulnerabilities
Course Builder1 vulnerabilities
Fundpress1 vulnerabilities
Fundpress – Wordpress Donation Plugin1 vulnerabilities
Ivy School1 vulnerabilities
Learnpress – Course Review1 vulnerabilities
Learnpress – Sepay Payment1 vulnerabilities
Resca1 vulnerabilities
Thim Blocks1 vulnerabilities

CVE-2026-110363thimpresslearnpress20h ago19-10-2026 12:21Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.CVE-2026-107744thimpresslearnpress – wordpress lms plugin for create and sell online courses3d ago17-10-2026 03:43

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to enumerate the complete site user roster and extract the full email address of any WordPress account, including administrator accounts, character-by-character by using the search response as an oracle against both user_login and user_email columns.CVE-2026-104736thimpresslearnpress – wordpress lms plugin for create and sell online courses3d ago17-10-2026 03:43

The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through sanitize_text_field(), which does not strip serialized object syntax, then stored in the LearnPress session table and later fed to LP_Helper::maybe_unserialize() → unserialize() (without an allowed_classes restriction) by LP_Session_Handler::get() on subsequent requests. This makes it possible for unauthenticated attackers to inject a PHP Object.CVE-2026-109208thimpresslearnpress – wordpress lms plugin for create and sell online courses3d ago17-10-2026 02:31

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (REST) / order_comments (checkout)' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. With guest checkout enabled the attack is fully unauthenticated; with guest checkout disabled, any Subscriber-level user can exploit both vectors through their own checkout.CVE-2018-16174thimpresslearnpress+17y ago09-01-2019 22:00

Open redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.CVE-2018-16175thimpresslearnpress+17y ago09-01-2019 22:00

SQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.CVE-2018-16173thimpresslearnpress+17y ago09-01-2019 22:00

Cross-site scripting vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2021-36852thimpresswp_hotel_booking+14y ago22-08-2022 14:45

Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress.CVE-2021-39348learnpresslearnpress+24y ago21-10-2021 19:38

The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom_profile parameter found in the ~/inc/admin/views/backend-user-profile.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.1.3.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. Please note that this is seperate from CVE-2021-24702.CVE-2021-24702thimpresslearnpress+25y ago18-10-2021 13:46

The LearnPress WordPress plugin before 4.1.3.1 does not properly sanitize or escape various inputs within course settings, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltred_html capability is disallowed CVE-2021-24951thimpresslearnpress+24y ago13-12-2021 10:41

The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating course/lesson/quiz/question, leading to SQL Injections issues CVE-2025-63012thimpresswp_hotel_booking+110mo ago09-12-2025 14:52

Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows Cross Site Request Forgery.This issue affects WP Hotel Booking: from n/a through <= 2.2.8.CVE-2025-63013thimpresswp_hotel_booking+110mo ago09-12-2025 14:52

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows Retrieve Embedded Sensitive Data.This issue affects WP Hotel Booking: from n/a through <= 2.2.7.CVE-2025-63011thimpresswp_hotel_booking+110mo ago09-12-2025 14:52

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows DOM-Based XSS.This issue affects WP Hotel Booking: from n/a through <= 2.2.8.CVE-2025-54721thimpressresca+111mo ago06-11-2025 15:54

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress Resca resca allows Reflected XSS.This issue affects Resca: from n/a through <= 3.0.2.CVE-2025-13956thimpresslearnpress – wordpress lms plugin for create and sell online courses+110mo ago16-12-2025 04:31

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the statistic function in all versions up to, and including, 4.3.1. This makes it possible for unauthenticated attackers to view the plugin's orders statistics, including total revenue summaries and order status counts CVE-2025-13725thimpressthim blocks+19mo ago17-01-2026 03:24

The Gutenberg Thim Blocks – Page Builder, Gutenberg Blocks for the Block Editor plugin for WordPress is vulnerable to arbitrary file reads in all versions up to, and including, 1.0.1. This is due to insufficient path validation in the server-side rendering of the thim-blocks/icon block. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server via the 'iconSVG' parameter, which can contain sensitive information such as wp-config.php.CVE-2025-13964thimpresslearnpress – wordpress lms plugin for create and sell online courses+19mo ago06-01-2026 08:21

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the catch_lp_ajax function in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to modify course contents by adding/removing/updating/re-ordering sections or modifying section items.CVE-2025-11368thimpresslearnpress – wordpress lms plugin for create and sell online courses+111mo ago21-11-2025 05:32

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 4.2.9.4. This is due to missing capability checks in the REST endpoint /wp-json/lp/v1/load_content_via_ajax which allows arbitrary callback execution of admin-only template methods. This makes it possible for unauthenticated attackers to retrieve admin curriculum HTML, quiz questions with correct answers, course materials, and other sensitive educational content via the REST API endpoint granted they can supply valid numeric IDs.CVE-2025-11372thimpresslearnpress – wordpress lms plugin for create and sell online courses+11y ago18-10-2025 06:42

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to modification of data in all versions up to, and including, 4.2.9.2. This is due to missing capability checks on the Admin Tools REST endpoints which are registered with permission_callback set to __return_true. This makes it possible for unauthenticated attackers to perform destructive database operations including dropping indexes on any table (including WordPress core tables like wp_options), creating duplicate configuration entries, and degrading site performance via the /wp-json/lp/v1/admin/tools/create-indexs endpoint granted they can provide table names.