Product by ThimPress

    Learnpress – Wordpress Lms Plugin For Create And Sell Online Courses

    45 known vulnerabilities in Learnpress – Wordpress Lms Plugin For Create And Sell Online Courses (ThimPress), 0 of them actively exploited (CISA KEV).

    Key figures

    45

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Learnpress – Wordpress Lms Plugin For Create And Sell Online Courses (ThimPress)
    CriticalCVE-2026-104736

    LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter

    		9.8
    CriticalCVE-2024-8522

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'

    also in 1 other product

    		10.0
    CriticalCVE-2024-4434

    LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2023-6567

    LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by

    also in 1 other product

    		9.8
    CriticalCVE-2024-8529

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'

    also in 1 other product

    		10.0
    CriticalCVE-2023-6634

    LearnPress <= 4.2.5.7 - Command Injection

    also in 1 other product

    		8.1
    CriticalCVE-2026-4365

    LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion

    		9.1
    HighCVE-2024-4397

    LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload

    also in 1 other product

    		8.8
    HighCVE-2026-13765

    Missing Authorization (CVE-2026-13765)

    		7.5
    HighCVE-2024-6589

    LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion

    also in 1 other product

    		8.8
    HighCVE-2026-93882

    Authorization Bypass Through User-Controlled Key (CVE-2026-93882)

    		7.5
    MediumCVE-2025-11368

    Exposure of Sensitive Information to an Unauthorized Actor (CVE-2025-11368)

    		5.3
    MediumCVE-2024-11868

    ThimPress LearnPress: Improper Access Control

    also in 1 other product

    		5.3
    HighCVE-2024-7548

    ThimPress LearnPress: SQL Injection

    also in 1 other product

    		8.8
    HighCVE-2026-109208

    Cross-site Scripting (CVE-2026-109208)

    		7.2
    MediumCVE-2025-13956

    Missing Authorization (CVE-2025-13956)

    		5.3
    MediumCVE-2026-11988

    Authorization Bypass Through User-Controlled Key (CVE-2026-11988)

    		6.5
    MediumCVE-2026-107744

    Missing Authorization (CVE-2026-107744)

    		6.5
    MediumCVE-2024-5483

    LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API

    also in 1 other product

    		5.3
    MediumCVE-2026-12230

    Cross-site Scripting (CVE-2026-12230)

    		6.4
    MediumCVE-2026-8502

    Missing Authorization (CVE-2026-8502)

    		5.3
    MediumCVE-2026-77823

    LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

    		4.9
    MediumCVE-2026-92538

    LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter

    		6.1
    MediumCVE-2026-12732

    Cross-site Scripting (CVE-2026-12732)

    		6.4
    MediumCVE-2025-11372

    Missing Authorization (CVE-2025-11372)

    		6.5

    All vulnerabilities in search

    All products by ThimPress