224 matches found
PT-2025-5552 · Thimpress · Learnpress
Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress versions prior to 4.2.7.1 Description: The issue is related to a URL redirection to an untrusted site, also known as an "Open Redirect". This problem allows redirection to potentially malicious sites. Recommendations: For...
PT-2025-5437
Name of the Vulnerable Software and Affected Versions ThimPress FundPress versions n/a through 2.0.6 Description The issue is related to the deserialization of untrusted data, allowing object injection. This problem affects ThimPress FundPress, enabling potential attacks. Recommendations For...
CVE-2025-22312 WordPress Thim Elementor Kit plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress Thim Elementor Kit allows DOM-Based XSS.This issue affects Thim Elementor Kit: from n/a through 1.2.8...
CVE-2024-51582
Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion.This issue affects WP Hotel Booking: from n/a through = 2.2.9...
CVE-2024-51582 WordPress WP Hotel Booking plugin <= 2.2.9 - Local File Inclusion vulnerability
Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion.This issue affects WP Hotel Booking: from n/a through = 2.2.9...
CVE-2024-51582
CVE-2024-51582 is a Path Traversal leading to PHP Local File Inclusion in the WP Hotel Booking plugin (affected
CVE-2024-51582 WordPress WP Hotel Booking plugin <= 2.2.9 - Local File Inclusion vulnerability
Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion.This issue affects WP Hotel Booking: from n/a through = 2.2.9...
CVE-2024-39641
Cross-Site Request Forgery CSRF vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.6.8.2...
CVE-2024-39641
Cross-Site Request Forgery CSRF vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.6.8.2...
CVE-2024-39641 WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.6.8.2...
CVE-2024-39641
Summary: CVE-2024-39641 is a CSRF vulnerability in LearnPress (WordPress LMS plugin) affecting LearnPress versions up to 4.2.6.8.2. The vulnerability was fixed in version 4.2.6.9. Affected software: LearnPress – WordPress LMS Plugin. Root cause / impact: Cross-Site Request Forgery; exploitation d...
CVE-2024-39642
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LearnPress: from n/a through 4.2.6.8.2...
CVE-2024-39642
CVE-2024-39642 is an Insecure Direct Object References (IDOR) vulnerability in the LearnPress WordPress LMS plugin (versions up to 4.2.6.8.2). The root cause is an Authorization Bypass where a user-controlled key allows accessing functionality not properly constrained by ACLs. Public disclosures ...
PT-2024-28579 · Thimpress · Learnpress
Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress versions through 4.2.6.8.2 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: Fo...
CVE-2023-36516
Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3...
CVE-2023-36516
Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3...
CVE-2023-36515
Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3...
CVE-2023-36515
Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3...
CVE-2023-36515 WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability
Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3...