Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how thimpress compares to other vendors in security performance

View Risk Score →

thimpress LearnPress Backup & Migration ToolLearnPress <= 4.1.4 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'import-user-file' Parameter

Risk 30
Severity
4.9
First published (updated )
CVE-2026-7565

thimpress LearnPress – Backup & Migration ToolLearnPress – Backup & Migration Tool <= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload

Risk 61
Severity
6.6
First published (updated )
CVE-2026-7566

thimpress Thim CoreWordPress Thim Core Plugin <= 2.3.3 - Broken Access Control Vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2025-53346

thimpress Thim CoreWordPress Thim Core plugin <= 2.3.3 - Arbitrary Plugin Installation vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2025-53345

thimpress LearnPressLearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter

Risk 16
Severity
4.3
EPSS
0.01%
First published (updated )
CVE-2026-7648
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

thimpress LearnPressLearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion

Risk 66
Severity
9.1
First published (updated )
CVE-2026-4365

thimpress LearnPressLearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2026-4333

thimpress LearnPressLearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion

Risk 22
Severity
4.3
First published (updated )
CVE-2026-3225

thimpress BuilderPressWordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability

Risk 46
Severity
9.8
First published (updated )
CVE-2026-27065

thimpress Thim CoreWordPress Thim Core Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2025-53344
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

thimpress WP Hotel BookingWordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerability

Risk 40
Severity
5.9
First published (updated )
CVE-2025-63011

thimpress SailingWordPress Sailing theme < 4.4.6 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2025-67573

thimpress LearnPress Export ImportWordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerability

Risk 69
Severity
7.5
First published (updated )
CVE-2025-60200

thimpress RescaWordPress Resca theme <= 3.0.2 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2025-54721

thimpress EdumaWordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )
CVE-2025-64195
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

thimpress EdumaWordPress Eduma theme <= 5.7.6 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2025-64194

thimpress WP PipesWordPress WP Pipes plugin <= 1.4.3 - Arbitrary File Deletion vulnerability

Risk 49
Severity
8.6
First published (updated )
CVE-2025-60227

thimpress WP PipesWordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2025-28977

thimpress WP PipesWordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2025-28979

thimpress WP PipesWordPress WP Pipes plugin <= 1.4.3 - SQL Injection Vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2025-28982
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

thimpress WP PipesWordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion Vulnerability

Risk 66
Severity
9.1
First published (updated )
CVE-2025-48267

thimpress Course BuilderWordPress Course Builder < 3.6.6 - PHP Object Injection Vulnerability

Risk 61
Severity
9.8
EPSS
0.05%
First published (updated )
CVE-2025-48336

thimpress EdumaWordPress Eduma theme <= 5.6.4 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2025-39460

LearnPress WordPress LMS PluginLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-13128

LearnPress LearnPressLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-13127
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

thimpress WP PipesWordPress WP Pipes plugin <= 1.4.3 - Server Side Request Forgery (SSRF) Vulnerability

Risk 37
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2025-47664

thimpress Ivy SchoolWordPress Ivy School theme <= 1.6.0 - Local File Inclusion Vulnerability

Risk 54
Severity
8.1
EPSS
0.06%
First published (updated )
CVE-2025-39470

thimpress LearnPressWordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2025-22739

thimpress LearnPressWordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability

Risk 19
Severity
4.7
EPSS
0.06%
First published (updated )
CVE-2025-24740

thimpress FundPressWordPress FundPress plugin <= 2.0.6 - PHP Object Injection vulnerability

Risk 39
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2025-24601
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203