Skip to contentThimpress vulnerabilities
Newest
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.1.9 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-474484.3 Medium
- thimpress ivy schoolWordPress Ivy School theme <= 1.6.0 - Local File Inclusion VulnerabilityCVE-2025-394708.1 High
- thimpress learnpressWordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerabilityCVE-2025-227395.3 Medium
- thimpress learnpressWordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerabilityCVE-2025-247404.7 Medium
- thimpress fundpressWordPress FundPress plugin <= 2.0.6 - PHP Object Injection vulnerabilityCVE-2025-246019.8 Critical
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson NameCVE-2024-135996.4 Medium
- thimpress thim elementor kitWordPress Thim Elementor Kit Plugin <= 1.2.8 - Broken Access Control vulnerabilityCVE-2025-247254.3 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email RetrievalCVE-2024-134474.3 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.1.5 - Missing AuthorizationCVE-2024-123705.3 Medium
- thimpress thim elementor kitWordPress Thim Elementor Kit plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-223126.5 Medium
- thimpress learnpressLearnPress < 4.2.7.2 - Admin+ Stored XSSCVE-2024-98814.8 Medium
- thimpress learnpressLearnPress < 4.2.7.2 - Admin+ Stored XSSCVE-2024-100104.8 Medium
- thimpress wp pipesWP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 ParameterCVE-2024-122836.1 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST APICVE-2024-118685.3 Medium
- thimpress learnpress export import, learnpress – backup & migration tool +1 moreLearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site ScriptingCVE-2024-96096.1 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.9 - Local File Inclusion vulnerabilityCVE-2024-515827.5 High
- thimpress wp hotel bookingWP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-7855EPSS 17.7%8.8 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'CVE-2024-8529Public exploitEPSS 12.1%10.0 Critical
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'CVE-2024-8522Public exploitEPSS 62.9%10.0 Critical
- thimpress wp events managerWP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL InjectionCVE-2024-77178.8 High
- thimpress learnpressWordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-396414.3 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-396426.5 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order ParameterCVE-2024-75488.8 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File InclusionCVE-2024-65898.8 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User RegistrationCVE-2024-60995.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration BypassCVE-2024-60885.3 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.1.0 - Unauthenticated SQL InjectionCVE-2024-3605Public exploit10.0 Critical
- thimpress learnpressWordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerabilityCVE-2023-365157.3 High
- thimpress learnpressWordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerabilityCVE-2023-365167.6 High
- thimpress edumaWordPress Eduma theme <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-356977.1 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON APICVE-2024-54835.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterCVE-2024-49716.4 Medium
- thimpress thim kit for elementor – pre-built templates & widgets for elementorThim Elementor Kit <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterCVE-2024-43296.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html ParameterCVE-2024-42776.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User RegistrationCVE-2024-44445.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL InjectionCVE-2024-4434EPSS 36.9%9.8 Critical
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File UploadCVE-2024-43978.8 High
- thimpress thim elementor kitWordPress Thim Elementor Kit plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-344156.5 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-35606.4 Medium
- thimpress learnpress, learnpress export import +1 moreWordPress LearnPress Export Import plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-325887.1 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site ScriptingCVE-2024-14634.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.6.3 - Insecure Direct Object ReferenceCVE-2024-12896.5 Medium
- thimpress learnpress, learnpress export import +1 moreWordPress LearnPress Export Import plugin <= 4.0.3 - Auth. SQL Injection vulnerabilityCVE-2024-312417.6 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege EscalationCVE-2024-21158.8 High
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.0.9.2 - Broken Access Control vulnerabilityCVE-2024-305086.5 Medium
- thimpress learnpressLearnPress < 4.2.5.5 - Reflected Cross-Site ScriptingCVE-2023-55586.1 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_byCVE-2023-6567Public exploitEPSS 51.4%9.8 Critical
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.5.7 - Command InjectionCVE-2023-6634Public exploit8.1 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information DisclosureCVE-2023-62234.3 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post DeletionCVE-2023-56515.4 Medium
- Show moreLoading…