Skip to content
OpenAdvisories

Vendor

ThimPress

138 known vulnerabilities.

Products

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 45 LearnPress 25 WP Hotel Booking 17 WP Pipes 9 LearnPress Export Import 5 Thim Elementor Kit 4 Eduma 4 LearnPress – Backup & Migration Tool 4 Thim Core 3 LearnPress – WordPress LMS Plugin 3 Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor 2 LearnPress – Course Review 2 RealPress 2 WP Events Manager 2 Sailing 2 Resca 1 FundPress – WordPress Donation Plugin 1 Thim Blocks 1 FundPress 1 Ivy School 1 Coaching 1 LearnPress – Sepay Payment 1 Course Builder 1 BuilderPress 1
All Critical High Medium Low Exploited only Public exploit

85 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-30508

    WordPress WP Hotel Booking plugin <= 2.0.9.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThimPress WP Hotel Booking.This issue affects WP Hotel Booking: from n/a through 2.0.9.2.

    ThimPress WP Hotel Booking
  • Medium 4.3
    CVE-2023-6223

    LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure

    The LearnPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.5.7 via the /wp-json/lp/v1/profile/course-tab REST API due to missing validation on the 'userID' user controlled key. This makes it…

    ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Web / CMS
  • Medium 5.4
    CVE-2023-40009

    WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Pipes plugin <= 1.4.0 versions.

    ThimPress WP Pipes
  • Medium 4.3
    CVE-2020-36757

    WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass

    The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.10.1. This is due to missing or incorrect nonce validation on the admin_add_order_item() function. This makes it possible for unauthentic…

    ThimPress WP Hotel Booking Web / CMS
  • Medium 4.3
    CVE-2021-36852

    WordPress WP Hotel Booking plugin <= 1.10.5 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress.

    ThimPress WP Hotel Booking