Skip to content
OpenAdvisories

Vendor

ThimPress

138 known vulnerabilities.

Products

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 45 LearnPress 25 WP Hotel Booking 17 WP Pipes 9 LearnPress Export Import 5 Thim Elementor Kit 4 Eduma 4 LearnPress – Backup & Migration Tool 4 Thim Core 3 LearnPress – WordPress LMS Plugin 3 Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor 2 LearnPress – Course Review 2 RealPress 2 WP Events Manager 2 Sailing 2 Resca 1 FundPress – WordPress Donation Plugin 1 Thim Blocks 1 FundPress 1 Ivy School 1 Coaching 1 LearnPress – Sepay Payment 1 Course Builder 1 BuilderPress 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-104736 Public exploit

    LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter

    The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through …

    ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Web / CMS
  • Critical 10.0
    CVE-2024-8522 Public exploit EPSS 63%

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'

    The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the…

    ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Web / CMS
  • Critical 10.0
    CVE-2024-8529 Public exploit EPSS 12%

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'

    The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on t…

    ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Web / CMS
  • Critical 10.0
    CVE-2024-3605 Public exploit

    WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection

    The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the 'room_type' parameter of the /wphb/v1/rooms/search-rooms REST API endpoint in all versions up to, and including, 2.1.0 due to insufficient escaping on the user supplied parameter…

    ThimPress WP Hotel Booking Web / CMS
  • Critical 9.8
    CVE-2023-6567 Public exploit EPSS 51%

    LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by

    The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis…

    ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Web / CMS
  • High 8.1
    CVE-2023-6634 Public exploit

    LearnPress <= 4.2.5.7 - Command Injection

    The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function. This is due to the plugin making use of the call_user_func function with user input. This makes it possible for …

    ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Web / CMS
  • Critical 9.9
    CVE-2022-45808 Public exploit

    WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection

    SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

    ThimPress LearnPress – WordPress LMS Plugin Web / CMS
  • Critical 9.3
    CVE-2022-47615 Public exploit

    WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion

    Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

    ThimPress LearnPress – WordPress LMS Plugin Web / CMS