CVE Tools
Track your stack

Thimpress

81 CVEs tracked since 2024. Since Jan 2024, none of them reached CISA KEV.

Thimpress CVEs per month

Jan 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Thimpress CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0140
2024-024 or fewer
2024-034 or fewer
2024-0460
2024-0570
2024-0650
2024-074 or fewer
2024-0840
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-1240
2025-0170
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-0560
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-1050
2025-114 or fewer
2025-12100
2026-0170
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-0770
2026-088 or fewer
2026-099 or fewer
2026-1090

Products

The products that kept showing up in Thimpress's monthly top three, with their CVEs summed over those months.

  1. Learnpress3210 months
  2. Learnpress – WordPress Lms Plugin For Create and Sell Online Courses2911 months
  3. Wp Hotel Booking93 months
  4. Eduma43 months
  5. Learnpress Export Import32 months
  6. Thim Elementor Kit32 months
  7. Course Builder11 month
  8. Learnpress – Course Review11 month
  9. Thim Blocks11 month
  10. Wp Events Manager11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Thimpress.

  1. CVE-2026-113353LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers5.4
  2. CVE-2026-110363WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability5.4
  3. CVE-2026-107744LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action6.5
  4. CVE-2026-104736LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter9.8
  5. CVE-2026-109208LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters7.2
  6. CVE-2026-104670WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability7.1
  7. CVE-2026-105397LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation5.4
  8. CVE-2026-92538LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter6.1
  9. CVE-2026-39717WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability4.3
  10. CVE-2026-104403WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability5.3
  11. CVE-2026-93882LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter7.5
  12. CVE-2026-12230LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'6.4
  13. CVE-2026-82024LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles5.4
  14. CVE-2026-82023LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert4.3
  15. CVE-2026-77823LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter4.9

The record

Peak rank
#102 in Dec 2025
Busiest month shown
Dec 2025, 10 CVEs
Months with a KEV entry
0 since Jan 2024
Monthly snapshots
13 since 2024
Thimpress's full record, month by month