Where
-Infinity
0

Trending

Last week
Last month
Last year

thimpress LearnPressLearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter

Risk 16
Severity
4.3
EPSS
0.01%
First published (updated )
CVE-2026-7648

thimpress LearnPressLearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion

Risk 66
Severity
9.1
First published (updated )
CVE-2026-4365

thimpress LearnPressLearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2026-4333

thimpress LearnPressLearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion

Risk 22
Severity
4.3
First published (updated )
CVE-2026-3225

LearnPress WordPress LMS PluginLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-13128
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

LearnPress LearnPressLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-13127

thimpress LearnPressWordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2025-22739

thimpress LearnPressWordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability

Risk 19
Severity
4.7
EPSS
0.06%
First published (updated )
CVE-2025-24740

thimpress Learnpress WordpressLearnPress < 4.2.7.2 - Admin+ Stored XSS

Risk 23
Severity
4.8
EPSS
0.04%
First published (updated )
CVE-2024-9881

LearnPress LearnPressLearnPress < 4.2.7.2 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-10010
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

thimpress LearnPressWordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability

Risk 38
Severity
6.5
First published (updated )
CVE-2024-39642

thimpress Learnpress WordpressLearnPress < 4.2.5.5 - Reflected Cross-Site Scripting

Risk 28
Severity
6.1
EPSS
2.69%
First published (updated )
CVE-2023-5558

thimpress Learnpress WordpressLearnPress < 4.1.7.2 - Unauthenticated PHP Object Injection via REST API

Risk 75
Severity
8.1
First published (updated )
CVE-2022-3360

thimpress Learnpress WordpressLearnPress < 4.1.6 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2022-0271

thimpress Learnpress WordpressLearnPress < 4.1.5 - Arbitrary Image Renaming

Risk 22
Severity
4.3
First published (updated )
CVE-2022-0377
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

thimpress Learnpress WordpressLearnPress < 4.1.4 - Admin+ SQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2021-24951

thimpress Learnpress WordpressLearnPress – WordPress LMS Plugin <= 4.1.3.1 Authenticated Stored Cross-Site Scripting

Risk 33
Severity
5.5
First published (updated )
CVE-2021-39348

thimpress Learnpress WordpressLearnPress < 4.1.3.1 - Multiple Admin+ Stored Cross-Site Scripting

Risk 29
Severity
4.8
First published (updated )
CVE-2021-24702

thimpress Learnpress WordpressThe LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the privilege…

Risk 75
Severity
8.1
First published (updated )
CVE-2020-11511

thimpress Learnpress WordpressSQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2020-6010
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

thimpress Learnpress WordpressXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2018-16173

thimpress Learnpress WordpressSQL Injection

Risk 66
Severity
7.2
First published (updated )
CVE-2018-16175

thimpress Learnpress WordpressOpen redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to redirect…

Risk 38
Severity
6.1
First published (updated )
CVE-2018-16174

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203