LearnPress <4.1.6 - Cross-Site Scripting

WordPress LearnPress plugin before 4.1.6 contains a cross-site scripting vulnerability. It does not sanitize and escape the lp-dismiss-notice before outputting it back via the lpbackgroundsingleemail AJAX action. id: CVE-2022-0271 info: name: LearnPress 4.1.6 - Cross-Site Scripting author:...

LearnPress Plugin < 4.2.0 - Local File Inclusion

Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin = 4.1.7.3.2 versions. id: CVE-2022-47615 info: name: LearnPress Plugin 4.2.0 - Local File Inclusion author: DhiyaneshDK severity: critical description: | Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin...

CVE-2026-115598 WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-115598

The ThimPress LearnPress WordPress plugin (versions up to and including 4.4.11 ) is vulnerable to a Missing Authorization issue (CWE-862). This flaw allows attackers to exploit Incorrectly Configured Access Control Security Levels . The vulnerability carries a CVSS 3.1 base score of 5.3 (Medium) ...

CVE-2026-115598 WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-115597 WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-115597

The ThimPress LearnPress plugin for WordPress (versions up to and including 4.4.11 ) is vulnerable to a Missing Authorization flaw (CWE-862). This issue allows for the exploitation of incorrectly configured access control security levels . The vulnerability has a CVSS 3.1 base score of 5.4 (Mediu...

EUVD-2026-109991

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

WP Hotel Booking < 1.10.4 - PHP Object Injection

The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpresshotelbooking1 cookie in load in includes/class-wphb-sessions.php. id: CVE-2020-29047 info: name: WP Hotel Booking 1.10.4 - PHP Object...

PT-2026-123428

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

PT-2026-123427

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-110363 WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...

CVE-2026-110363

The ThimPress LearnPress WordPress plugin (versions up to and including 4.4.10 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels. The impact involves unauthorized access or actions due to broke...

CVE-2026-110363 WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...

EUVD-2026-104257

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...

CVE-2026-110363: Missing Authorization

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...

ThimPress LearnPress licensing issue vulnerabilities

ThimPress and LearnPress versions 4.4.10 and earlier have an authorization-related vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

ThimPress LearnPress deserialization injection vulnerability

ThimPress and LearnPress versions 4.4.10 and earlier have a deserialization injection vulnerability. This vulnerability stems from improper deserialization handling of the 'checkout-email' request parameter during the checkout AJAX operation. The deserialization process does not filter the syntax...

CVE-2026-39717

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...

CVE-2026-39717 WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...