CVE-2023-36516 WordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3...

PT-2024-12566 · Thimpress · Learnpress

Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress versions 4.2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in ThimPress LearnPress. This vulnerability affects LearnPress versions from n/a through 4.2.3. Recommendations: For...

PT-2024-12565 · Thimpress · Thimpress Learnpress

Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress versions 4.2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in ThimPress LearnPress. Recommendations: For ThimPress LearnPress versions 4.2.3 and earlier, update to a version late...

CVE-2024-35697

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThimPress Eduma allows Reflected XSS.This issue affects Eduma: from n/a through 5.4.7...

CVE-2024-35697

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThimPress Eduma allows Reflected XSS.This issue affects Eduma: from n/a through 5.4.7...

CVE-2024-35697

CVE-2024-35697 (Eduma WordPress theme) is a reflected XSS in Eduma, affecting versions n/a–5.4.7. The issue is a result of improper input neutralization during web page generation, enabling reflected XSS via user-supplied input. The CVE entry notes a patch status of Patched for Eduma

CVE-2024-35697 WordPress Eduma theme <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThimPress Eduma allows Reflected XSS.This issue affects Eduma: from n/a through 5.4.7...

PT-2024-26645 · Thimpress · Thimpress Eduma

Name of the Vulnerable Software and Affected Versions: ThimPress Eduma versions n/a through 5.4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. Recommendations: For versions n/a...

CVE-2024-34415

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress Thim Elementor Kit allows Stored XSS.This issue affects Thim Elementor Kit: from n/a through 1.1.8...

CVE-2024-34415 WordPress Thim Elementor Kit plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress Thim Elementor Kit allows Stored XSS.This issue affects Thim Elementor Kit: from n/a through 1.1.8...

CVE-2024-34415

CVE-2024-34415 affects Thim Elementor Kit (WordPress plugin). The vulnerability is a Stored XSS due to improper input neutralization during web page generation, affecting Thim Elementor Kit versions up to 1.1.8 (inclusive). Red Hat and Wordfence entries corroborate the issue and classify it as St...

CVE-2024-32588 WordPress LearnPress Export Import plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress LearnPress Export Import allows Reflected XSS.This issue affects LearnPress Export Import: from n/a through 4.0.3...

CVE-2024-32588 WordPress LearnPress Export Import plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress LearnPress Export Import allows Reflected XSS.This issue affects LearnPress Export Import: from n/a through 4.0.3...

PT-2024-24710 · Thimpress · Thimpress Learnpress Export Import

Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress Export Import versions n/a through 4.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an...

CVE-2024-31241

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ThimPress LearnPress Export Import.This issue affects LearnPress Export Import: from n/a through 4.0.3...

CVE-2024-31241

CVE-2024-31241 affects LearnPress Export Import (WordPress plugin) up to version 4.0.3. It is an SQL Injection vulnerability caused by improper neutralization of input, enabling an authenticated attacker to manipulate database queries. The CVSS v3.1 base score is 7.6 (HIGH) with network access, l...

PT-2024-23883 · Thimpress · Thimpress Learnpress Export Import

Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress Export Import versions n/a through 4.0.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitatio...

CVE-2024-30508

Missing Authorization vulnerability in ThimPress WP Hotel Booking.This issue affects WP Hotel Booking: from n/a through 2.0.9.2...

CVE-2024-30508

Missing Authorization vulnerability in ThimPress WP Hotel Booking.This issue affects WP Hotel Booking: from n/a through 2.0.9.2...

CVE-2024-30508 WordPress WP Hotel Booking plugin <= 2.0.9.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress WP Hotel Booking.This issue affects WP Hotel Booking: from n/a through 2.0.9.2...