---
title: "ThimPress LearnPress – Backup & Migration Tool vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/thimpress/learnpress-backup-and-migration-tool
type: product
description: "ThimPress LearnPress – Backup & Migration Tool has 4 published CVEs, 0 in CISA KEV and 0 with public exploits."
updated: 2026-06-06
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# ThimPress LearnPress – Backup & Migration Tool vulnerabilities

Vendor: [ThimPress](https://radicalnotion.ai/vendor/thimpress)

- **Published CVEs:** 4
- **In CISA KEV:** 0
- **With a public exploit:** 0
- **With a patch:** 4
- **Average CVSS:** 5.6
- **First CVE:** 2024-11-15
- **Latest CVE:** 2026-06-06

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 0 |
| Medium | 4 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 |
| [CWE-502](https://radicalnotion.ai/cwe/cwe-502) | Deserialization of Untrusted Data | 1 |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 1 |
| [CWE-862](https://radicalnotion.ai/cwe/cwe-862) | Missing Authorization | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2024 | 1 |
| 2025 | 0 |
| 2026 | 3 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| \<= 4.1.4 | range | 2 |
| \<= 4.0.4 | range | 1 |
| \<= 4.1.0 | range | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-7566 | LearnPress – Backup & Migration Tool \<= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload | medium | 6.6 | No | No | Yes |
| CVE-2026-7565 | LearnPress \<= 4.1.4 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'import-user-file' Parameter | medium | 4.9 | No | No | Yes |
| CVE-2026-1787 | LearnPress Export Import \<= 4.1.0 - Missing Authentication to Unauthenticated Migrated Course Deletion | medium | 4.8 | No | No | Yes |
| CVE-2024-9609 | LearnPress Export Import – WordPress extension for LearnPress \<= 4.0.4 - Reflected Cross-Site Scripting | medium | 6.1 | No | No | Yes |

## Frequently asked questions

### How many CVEs does ThimPress LearnPress – Backup & Migration Tool have?

ThimPress LearnPress – Backup & Migration Tool has 4 published CVE records since 2024.

### How many ThimPress LearnPress – Backup & Migration Tool CVEs are in CISA KEV?

None of ThimPress LearnPress – Backup & Migration Tool's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for ThimPress LearnPress – Backup & Migration Tool vulnerabilities?

No ThimPress LearnPress – Backup & Migration Tool CVEs currently have a tracked public exploit in this dataset.

### Which versions of ThimPress LearnPress – Backup & Migration Tool are affected?

3 distinct ThimPress LearnPress – Backup & Migration Tool versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in ThimPress LearnPress – Backup & Migration Tool CVEs?

ThimPress LearnPress – Backup & Migration Tool's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-502 (Deserialization of Untrusted Data), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).

### What is the average severity of ThimPress LearnPress – Backup & Migration Tool CVEs?

The average CVSS base score across ThimPress LearnPress – Backup & Migration Tool's scored CVEs is 5.6.

## Other products from this vendor

- [LearnPress](https://radicalnotion.ai/vendor/thimpress/learnpress) (66 CVEs)
- [LearnPress – WordPress LMS Plugin for Create and Sell Online Courses](https://radicalnotion.ai/vendor/thimpress/learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses) (45 CVEs)
- [WP Hotel Booking](https://radicalnotion.ai/vendor/thimpress/wp-hotel-booking) (21 CVEs)
- [WP Pipes](https://radicalnotion.ai/vendor/thimpress/wp-pipes) (9 CVEs)
- [LearnPress Export Import](https://radicalnotion.ai/vendor/thimpress/learnpress-export-import) (6 CVEs)
- [Eduma](https://radicalnotion.ai/vendor/thimpress/eduma) (4 CVEs)
- [LearnPress – WordPress LMS Plugin](https://radicalnotion.ai/vendor/thimpress/learnpress-wordpress-lms-plugin) (4 CVEs)
- [Thim Elementor Kit](https://radicalnotion.ai/vendor/thimpress/thim-elementor-kit) (4 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/thimpress/learnpress-backup-and-migration-tool). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.