Thimpress vulnerabilities
138 CVEs and advisories name Thimpress as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-1289LearnPress <= 4.2.6.3 - Insecure Direct Object Reference
- CVE-2024-31241WordPress LearnPress Export Import plugin <= 4.0.3 - Auth. SQL Injection vulnerability
- CVE-2024-2115LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation
- CVE-2024-30508WordPress WP Hotel Booking plugin <= 2.0.9.2 - Broken Access Control vulnerability
- CVE-2023-6567LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by
- CVE-2023-6634LearnPress <= 4.2.5.7 - Command Injection
- CVE-2023-6223LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure
- CVE-2023-40009WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2020-36757WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass
- CVE-2023-30487WordPress LearnPress Export Import Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-45355WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi)
- CVE-2022-45820WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection
- CVE-2022-45808WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection
- CVE-2022-47615WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion
- CVE-2021-36852WordPress WP Hotel Booking plugin <= 1.10.5 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2018-16175SQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with administrator rights to execute arbitrary SQL comm
- CVE-2018-16174Open redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to redirect users to arbitrary web sites and conduc
- CVE-2018-16173Cross-site scripting vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to inject arbitrary web script or HTML via u