Skip to contentThimpress Learnpress vulnerabilities
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course ModificationCVE-2025-139645.3 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerabilityCVE-2025-660547.5 High
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics ExposureCVE-2025-139565.3 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_socialCVE-2025-143876.4 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-675366.5 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information ExposureCVE-2025-113685.3 Medium
- thimpress learnpress export importWordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerabilityCVE-2025-602007.5 High
- thimpress learnpress export importWordPress LearnPress Export Import plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499927.1 High
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table ManipulationCVE-2025-113726.5 Medium
- thimpress learnpressLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSSCVE-2024-131284.8 Medium
- thimpress learnpressLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSSCVE-2024-131274.8 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerabilityCVE-2025-227395.3 Medium
- thimpress learnpressWordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerabilityCVE-2025-247404.7 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson NameCVE-2024-135996.4 Medium
- thimpress learnpressLearnPress < 4.2.7.2 - Admin+ Stored XSSCVE-2024-98814.8 Medium
- thimpress learnpressLearnPress < 4.2.7.2 - Admin+ Stored XSSCVE-2024-100104.8 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST APICVE-2024-118685.3 Medium
- thimpress learnpress export import, learnpress – backup & migration tool +1 moreLearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site ScriptingCVE-2024-96096.1 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'CVE-2024-8529Public exploitEPSS 12.1%10.0 Critical
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'CVE-2024-8522Public exploitEPSS 62.9%10.0 Critical
- thimpress learnpressWordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-396414.3 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-396426.5 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order ParameterCVE-2024-75488.8 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File InclusionCVE-2024-65898.8 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User RegistrationCVE-2024-60995.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration BypassCVE-2024-60885.3 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerabilityCVE-2023-365157.3 High
- thimpress learnpressWordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerabilityCVE-2023-365167.6 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON APICVE-2024-54835.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterCVE-2024-49716.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html ParameterCVE-2024-42776.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User RegistrationCVE-2024-44445.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL InjectionCVE-2024-4434EPSS 36.9%9.8 Critical
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File UploadCVE-2024-43978.8 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-35606.4 Medium
- thimpress learnpress, learnpress export import +1 moreWordPress LearnPress Export Import plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-325887.1 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site ScriptingCVE-2024-14634.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.6.3 - Insecure Direct Object ReferenceCVE-2024-12896.5 Medium
- thimpress learnpress, learnpress export import +1 moreWordPress LearnPress Export Import plugin <= 4.0.3 - Auth. SQL Injection vulnerabilityCVE-2024-312417.6 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege EscalationCVE-2024-21158.8 High
- thimpress learnpressLearnPress < 4.2.5.5 - Reflected Cross-Site ScriptingCVE-2023-55586.1 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_byCVE-2023-6567Public exploitEPSS 51.4%9.8 Critical
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.5.7 - Command InjectionCVE-2023-6634Public exploit8.1 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information DisclosureCVE-2023-62234.3 Medium
- thimpress learnpress, learnpress export import +1 moreWordPress LearnPress Export Import Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-304877.1 High
- thimpress learnpress, learnpress – wordpress lms plugin +1 moreWordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL InjectionCVE-2022-458209.1 Critical
- thimpress learnpress, learnpress – wordpress lms plugin +1 moreWordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL InjectionCVE-2022-45808Public exploit9.9 Critical
- thimpress learnpress, learnpress – wordpress lms plugin +1 moreWordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File InclusionCVE-2022-47615Public exploit9.3 Critical
- thimpress learnpress, learnpress – wordpress lms plugin +1 moreLearnPress < 4.1.7.2 - Unauthenticated PHP Object Injection via REST APICVE-2022-33608.1 High
- thimpress learnpress, learnpress – wordpress lms plugin +1 moreLearnPress < 4.1.6 - Reflected Cross-Site ScriptingCVE-2022-02716.1 Medium
- Show moreLoading…