Skip to content
OpenAdvisories
High · 7.5 CVE-2025-60200 EUVD-2025-38115GHSA-wvr7-fv92-hggh

WordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerability

Published Nov 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress LearnPress Export Import learnpress-import-export allows PHP Local File Inclusion.This issue affects LearnPress Export Import: from n/a through <= 4.1.2.

Affected products

VendorProductAffectedFixed
ThimPress LearnPress Export Import ≤ 4.1.2 —

References