Product by ThimPress

    ThimPress LearnPress

    63 known vulnerabilities in ThimPress LearnPress (ThimPress), 0 of them actively exploited (CISA KEV).

    Key figures

    63

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    10

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ThimPress LearnPress (ThimPress)
    CriticalCVE-2024-8522

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'

    also in 1 other product

    		10.0
    CriticalCVE-2024-4434

    LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2023-6567

    LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by

    also in 1 other product

    		9.8
    CriticalCVE-2024-8529

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'

    also in 1 other product

    		10.0
    HighCVE-2020-6010

    LearnPress Wordpress Plugin: SQL Injection

    		8.8
    CriticalCVE-2022-45808

    WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection

    also in 1 other product

    		9.9
    CriticalCVE-2023-6634

    LearnPress <= 4.2.5.7 - Command Injection

    also in 1 other product

    		8.1
    CriticalCVE-2022-47615

    WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion

    also in 1 other product

    		9.3
    HighCVE-2020-11511

    ThimPress LearnPress: security vulnerability

    		8.1
    HighCVE-2022-3360

    LearnPress < 4.1.7.2 - Unauthenticated PHP Object Injection via REST API

    		8.1
    MediumCVE-2021-39348

    LearnPress – WordPress LMS Plugin <= 4.1.3.1 Authenticated Stored Cross-Site Scripting

    		5.5
    CriticalCVE-2021-24951

    LearnPress < 4.1.4 - Admin+ SQL Injection

    		9.8
    MediumCVE-2022-0377

    LearnPress < 4.1.5 - Arbitrary Image Renaming

    		4.3
    MediumCVE-2022-0271

    LearnPress < 4.1.6 - Reflected Cross-Site Scripting

    		6.1
    HighCVE-2024-4397

    LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload

    also in 1 other product

    		8.8
    CriticalCVE-2022-45820

    WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection

    also in 1 other product

    		9.1
    HighCVE-2018-16175

    ThimPress LearnPress: SQL Injection

    		7.2
    HighCVE-2024-6589

    LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion

    also in 1 other product

    		8.8
    HighCVE-2026-115599

    WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

    		7.5
    MediumCVE-2024-11868

    ThimPress LearnPress: Improper Access Control

    also in 1 other product

    		5.3
    HighCVE-2024-7548

    ThimPress LearnPress: SQL Injection

    also in 1 other product

    		8.8
    MediumCVE-2020-7916

    ThimPress LearnPress: security vulnerability

    		6.5
    HighCVE-2026-104670

    WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2024-5483

    LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API

    also in 1 other product

    		5.3
    MediumCVE-2023-5558

    LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting

    		6.1

    All vulnerabilities in search

    All products by ThimPress