Skip to contentThimpress vulnerabilities
Newest
- thimpress thim coreWordPress Thim Core Plugin <= 2.3.3 - Broken Access Control VulnerabilityCVE-2025-533464.3 Medium
- thimpress thim coreWordPress Thim Core plugin <= 2.3.3 - Arbitrary plugin Installation vulnerabilityCVE-2025-533458.8 High
- thimpress learnpressWordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2026-488657.1 High
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' ParameterCVE-2026-76484.3 Medium
- thimpress fundpress – wordpress donation pluginFundPress <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX HandlerCVE-2026-46505.3 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer DeletionCVE-2026-43659.1 Critical
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode AttributeCVE-2026-43336.4 Medium
- thimpress learnpress – sepay paymentWordPress LearnPress – Sepay Payment plugin <= 4.0.0 - Broken Authentication vulnerabilityCVE-2026-250027.5 High
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer DeletionCVE-2026-32254.3 Medium
- thimpress builderpressWordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerabilityCVE-2026-270659.8 Critical
- thimpress thim kit for elementor – pre-built templates & widgets for elementorThim Kit for Elementor <= 1.3.7 - Missing Authorization to Unauthenticated Private Course DisclosureCVE-2026-18705.3 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification TriggeringCVE-2026-32264.3 Medium
- thimpress learnpress – backup & migration toolLearnPress Export Import <= 4.1.0 - Missing Authentication to Unauthenticated Migrated Course DeletionCVE-2026-17874.8 Medium
- thimpress realpressWordPress RealPress plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-270505.4 Medium
- thimpress learnpress – course reviewWordPress LearnPress – Course Review plugin <= 4.1.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-243616.5 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST APICVE-2025-147985.3 Medium
- thimpress thim blocksGutenberg Thim Blocks <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read via 'iconSVG' ParameterCVE-2025-137256.5 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' ParameterCVE-2025-140755.3 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material DeletionCVE-2025-148025.4 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course ModificationCVE-2025-139645.3 Medium
- thimpress thim coreWordPress Thim Core Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-533444.3 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerabilityCVE-2025-660547.5 High
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics ExposureCVE-2025-139565.3 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_socialCVE-2025-143876.4 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.7 - Sensitive Data Exposure vulnerabilityCVE-2025-630134.3 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-630124.3 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-630115.9 Medium
- thimpress thim elementor kitWordPress Thim Elementor Kit plugin <= 1.3.3 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2025-675944.3 Medium
- thimpress sailingWordPress Sailing theme < 4.4.6 - Broken Access Control vulnerabilityCVE-2025-675735.3 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-675366.5 Medium
- thimpress sailingWordPress Sailing theme < 4.4.6 - Local File Inclusion vulnerabilityCVE-2025-675267.5 High
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information ExposureCVE-2025-113685.3 Medium
- thimpress learnpress export importWordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerabilityCVE-2025-602007.5 High
- thimpress rescaWordPress Resca theme <= 3.0.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-547217.1 High
- thimpress edumaWordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerabilityCVE-2025-641957.5 High
- thimpress edumaWordPress Eduma theme <= 5.7.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-641946.5 Medium
- thimpress wp pipesWordPress WP Pipes plugin <= 1.4.3 - Arbitrary File Deletion vulnerabilityCVE-2025-602278.6 High
- thimpress learnpress export importWordPress LearnPress Export Import plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499927.1 High
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table ManipulationCVE-2025-113726.5 Medium
- thimpress wp events managerWordPress WP Events Manager Plugin <= 2.2.1 - Broken Access Control VulnerabilityCVE-2025-579875.3 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.2.3 - Subscriber+ Rating ManipulationCVE-2025-89429.1 Critical
- thimpress wp pipesWordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-289777.1 High
- thimpress wp pipesWordPress WP Pipes <= 1.4.3 - Local File Inclusion VulnerabilityCVE-2025-289798.1 High
- thimpress wp pipesWordPress WP Pipes plugin <= 1.4.3 - SQL Injection VulnerabilityCVE-2025-289829.3 Critical
- thimpress wp pipesWordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion VulnerabilityCVE-2025-482678.6 High
- thimpress course builderWordPress Course Builder < 3.6.6 - PHP Object Injection VulnerabilityCVE-2025-483369.8 Critical
- thimpress edumaWordPress Eduma theme <= 5.6.4 - Broken Access Control vulnerabilityCVE-2025-394605.3 Medium
- thimpress learnpressLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSSCVE-2024-131284.8 Medium
- thimpress learnpressLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSSCVE-2024-131274.8 Medium
- thimpress wp pipesWordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) VulnerabilityCVE-2025-476644.4 Medium
- Show moreLoading…