ThimPress
- Total products in the ecosystem
- 23
- Total vulnerabilities (90 days)
- 23
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, ThimPress recorded 23 security vulnerabilities in the last 90 days across 4 products, including 6 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, LearnPress had the most security vulnerabilities in the ThimPress ecosystem, with 13 vulnerabilities—approximately 56.52% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2024-7548LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order ParameterCVE-2024-6589LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File InclusionCVE-2024-6099LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User RegistrationCVE-2024-6088LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration BypassCVE-2024-3605WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2024-7548LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter | Exploitation statusNot exploited | FixYes |
| Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses |
| Published08/08/2024 |
| SeverityHigh |
CVE-2024-6589LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published07/25/2024 | SeverityHigh |
|---|
CVE-2024-6099LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published07/02/2024 | SeverityMedium |
|---|
CVE-2024-6088LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration Bypass | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published07/02/2024 | SeverityMedium |
|---|
CVE-2024-3605WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection | Exploitation statusNot exploited | FixYes | Affected productWP Hotel Booking | Published06/20/2024 | SeverityCritical |
|---|
CVE-2023-36516WordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability | Exploitation statusActively exploited | FixYes | Affected productLearnPress | Published06/19/2024 | SeverityHigh |
|---|
CVE-2023-36515WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productLearnPress | Published06/19/2024 | SeverityHigh |
|---|
CVE-2024-35697WordPress Eduma theme <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEduma | Published06/08/2024 | SeverityHigh |
|---|
CVE-2024-5483LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published06/05/2024 | SeverityMedium |
|---|
CVE-2024-4971LearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published05/22/2024 | SeverityMedium |
|---|
CVE-2024-4329Thim Elementor Kit <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter | Exploitation statusNot exploited | FixYes | Affected productThim Kit for Elementor – Pre-built Templates & Widgets for Elementor | Published05/11/2024 | SeverityMedium |
|---|
CVE-2024-4444LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published05/10/2024 | SeverityMedium |
|---|
CVE-2024-4434LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published05/10/2024 | SeverityCritical |
|---|
CVE-2024-4277LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameter | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published05/10/2024 | SeverityMedium |
|---|
CVE-2024-4397LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published05/09/2024 | SeverityHigh |
|---|
CVE-2024-34415WordPress Thim Elementor Kit plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productThim Elementor Kit | Published05/09/2024 | SeverityMedium |
|---|
CVE-2024-3560LearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-32588WordPress LearnPress Export Import plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productLearnPress Export Import | Published04/18/2024 | SeverityHigh |
|---|
CVE-2024-1463LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-1289LearnPress <= 4.2.6.3 - Insecure Direct Object Reference | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-31241WordPress LearnPress Export Import plugin <= 4.0.3 - Auth. SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productLearnPress Export Import | Published04/07/2024 | SeverityHigh |
|---|
CVE-2024-2115LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published04/05/2024 | SeverityHigh |
|---|
CVE-2024-30508WordPress WP Hotel Booking plugin <= 2.0.9.2 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP Hotel Booking | Published03/29/2024 | SeverityMedium |
|---|
CVE-2023-6634LearnPress <= 4.2.5.7 - Command Injection | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published01/11/2024 | SeverityHigh |
|---|
CVE-2023-6567LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published01/11/2024 | SeverityCritical |
|---|
CVE-2023-6223LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin for Create and Sell Online Courses | Published01/11/2024 | SeverityMedium |
|---|
CVE-2023-40009WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productWP Pipes | Published10/03/2023 | SeverityMedium |
|---|
CVE-2020-36757WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass | Exploitation statusNot exploited | FixYes | Affected productWP Hotel Booking | Published07/12/2023 | SeverityMedium |
|---|
CVE-2023-30487WordPress LearnPress Export Import Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS) | Exploitation statusNot exploited | FixYes | Affected productLearnPress Export Import | Published05/18/2023 | SeverityHigh |
|---|
CVE-2022-45355WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi) | Exploitation statusNot exploited | FixYes | Affected productWP Pipes | Published03/29/2023 | SeverityHigh |
|---|
CVE-2022-47615WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin | Published01/24/2023 | SeverityCritical |
|---|
CVE-2022-45820WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin | Published01/24/2023 | SeverityCritical |
|---|
CVE-2022-45808WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection | Exploitation statusNot exploited | FixYes | Affected productLearnPress – WordPress LMS Plugin | Published01/24/2023 | SeverityCritical |
|---|
CVE-2021-36852WordPress WP Hotel Booking plugin <= 1.10.5 - Cross-Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixNo | Affected productWP Hotel Booking | Published08/22/2022 | SeverityMedium |
|---|
CVE-2018-16175CVE-2018-16175 | Exploitation statusNot confirmed | FixNo | Affected productLearnPress | Published01/09/2019 | SeverityUnknown |
|---|
CVE-2018-16174CVE-2018-16174 | Exploitation statusNot confirmed | FixNo | Affected productLearnPress | Published01/09/2019 | SeverityUnknown |
|---|
CVE-2018-16173CVE-2018-16173 | Exploitation statusNot confirmed | FixNo | Affected productLearnPress | Published01/09/2019 | SeverityUnknown |
|---|
137 Results | Page 3 of 3