Skip to content
OpenAdvisories

Product · ThimPress

LearnPress – Course Wishlist

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-127213

    LearnPress Course Wishlist < 4.1.2 IDOR via render_button

    LearnPress Course Wishlist Add-on before 4.1.2 contains an insecure direct object reference vulnerability that allows remote attackers to manipulate any user's course wishlist by supplying an arbitrary user_id parameter to the render_button callback instead o…

    ThimPress LearnPress – Course Wishlist