ThimPress / Learnpress
47 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-39717 | WordPress LearnPress plugin <= 4.4.9.1 - Broken Access Control vulnerability | MEDIUM | 4.3 | Oct 2, 2026 |
| CVE-2026-104403 | WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability | MEDIUM | 5.3 | Oct 2, 2026 |
| CVE-2026-82024 | LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles | MEDIUM | 5.1 | Sep 3, 2026 |
| CVE-2026-82023 | LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert | MEDIUM | 5.3 | Sep 3, 2026 |
| CVE-2026-48865 | WordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 7.1 | Jun 1, 2026 |
| CVE-2025-66054 | WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability | HIGH | 7.5 | Dec 18, 2025 |
| CVE-2025-67536 | WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 6.5 | Dec 9, 2025 |
| CVE-2024-13128 | LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS | MEDIUM | 4.8 | May 15, 2025 |
| CVE-2024-13127 | LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS | MEDIUM | 4.8 | May 15, 2025 |
| CVE-2025-22739 | WordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerability | MEDIUM | 5.3 | Mar 27, 2025 |
| CVE-2025-24740 | WordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability | MEDIUM | 4.7 | Jan 27, 2025 |
| CVE-2024-13599 | LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name | MEDIUM | 6.4 | Jan 25, 2025 |
| CVE-2024-9881 | LearnPress < 4.2.7.2 - Admin+ Stored XSS | MEDIUM | 4.8 | Dec 12, 2024 |
| CVE-2024-10010 | LearnPress < 4.2.7.2 - Admin+ Stored XSS | MEDIUM | 4.8 | Dec 12, 2024 |
| CVE-2024-11868 | LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API | MEDIUM | 5.3 | Dec 10, 2024 |
| CVE-2024-8522 | LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields' | CRITICAL | 10.0 | Sep 12, 2024 |
| CVE-2024-8529 | LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields' | CRITICAL | 10.0 | Sep 12, 2024 |
| CVE-2024-39641 | WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability | HIGH | 8.8 | Aug 26, 2024 |
| CVE-2024-39642 | WordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability | MEDIUM | 6.5 | Aug 13, 2024 |
| CVE-2024-7548 | LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter | HIGH | 8.8 | Aug 8, 2024 |
| CVE-2024-6589 | LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion | HIGH | 8.8 | Jul 25, 2024 |
| CVE-2024-6099 | LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration | MEDIUM | 5.3 | Jul 2, 2024 |
| CVE-2024-6088 | LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration Bypass | MEDIUM | 5.3 | Jul 2, 2024 |
| CVE-2023-36515 | WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability | CRITICAL | 9.8 | Jun 19, 2024 |
| CVE-2023-36516 | WordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability | HIGH | 8.8 | Jun 19, 2024 |
Showing 1 to 25 of 47 CVEs