---
title: "ThimPress LearnPress Export Import vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/thimpress/learnpress-export-import
type: product
description: "ThimPress LearnPress Export Import has 6 published CVEs, 0 in CISA KEV and 0 with public exploits."
updated: 2025-11-06
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# ThimPress LearnPress Export Import vulnerabilities

Vendor: [ThimPress](https://radicalnotion.ai/vendor/thimpress)

- **Published CVEs:** 6
- **In CISA KEV:** 0
- **With a public exploit:** 0
- **With a patch:** 6
- **Average CVSS:** 7.1
- **First CVE:** 2023-05-18
- **Latest CVE:** 2025-11-06

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 5 |
| Medium | 1 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 4 |
| [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 1 |
| [CWE-98](https://radicalnotion.ai/cwe/cwe-98) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2023 | 1 |
| 2024 | 3 |
| 2025 | 2 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| \<= 4.0.3 | range | 2 |
| \>= 4.0.4 | range | 2 |
| \< 4.0.5 | range | 1 |
| \<= 4.0.2 | range | 1 |
| \<= 4.0.9 | range | 1 |
| \<= 4.1.2 | range | 1 |
| \>= 4.0.3 | range | 1 |
| \>= 4.1.0 | range | 1 |
| \>= 4.1.3 | range | 1 |
| 4.0.4 | patched | 2 |
| 4.0.3 | patched | 1 |
| 4.0.5 | patched | 1 |
| 4.1.0 | patched | 1 |
| 4.1.3 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2025-60200 | WordPress LearnPress Export Import plugin \<= 4.1.2 - Local File Inclusion vulnerability | high | 7.5 | No | No | Yes |
| CVE-2025-49992 | WordPress LearnPress Export Import plugin \<= 4.0.9 - Cross Site Scripting (XSS) vulnerability | high | 7.1 | No | No | Yes |
| CVE-2024-9609 | LearnPress Export Import – WordPress extension for LearnPress \<= 4.0.4 - Reflected Cross-Site Scripting | medium | 6.1 | No | No | Yes |
| CVE-2024-32588 | WordPress LearnPress Export Import plugin \<= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability | high | 7.1 | No | No | Yes |
| CVE-2024-31241 | WordPress LearnPress Export Import plugin \<= 4.0.3 - Auth. SQL Injection vulnerability | high | 7.6 | No | No | Yes |
| CVE-2023-30487 | WordPress LearnPress Export Import Plugin \<= 4.0.2 is vulnerable to Cross Site Scripting (XSS) | high | 7.1 | No | No | Yes |

## Frequently asked questions

### How many CVEs does ThimPress LearnPress Export Import have?

ThimPress LearnPress Export Import has 6 published CVE records since 2023.

### How many ThimPress LearnPress Export Import CVEs are in CISA KEV?

None of ThimPress LearnPress Export Import's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for ThimPress LearnPress Export Import vulnerabilities?

No ThimPress LearnPress Export Import CVEs currently have a tracked public exploit in this dataset.

### Which versions of ThimPress LearnPress Export Import are affected?

14 distinct ThimPress LearnPress Export Import versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in ThimPress LearnPress Export Import CVEs?

ThimPress LearnPress Export Import's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

### What is the average severity of ThimPress LearnPress Export Import CVEs?

The average CVSS base score across ThimPress LearnPress Export Import's scored CVEs is 7.1.

## Other products from this vendor

- [LearnPress](https://radicalnotion.ai/vendor/thimpress/learnpress) (66 CVEs)
- [LearnPress – WordPress LMS Plugin for Create and Sell Online Courses](https://radicalnotion.ai/vendor/thimpress/learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses) (45 CVEs)
- [WP Hotel Booking](https://radicalnotion.ai/vendor/thimpress/wp-hotel-booking) (21 CVEs)
- [WP Pipes](https://radicalnotion.ai/vendor/thimpress/wp-pipes) (9 CVEs)
- [Eduma](https://radicalnotion.ai/vendor/thimpress/eduma) (4 CVEs)
- [LearnPress – Backup & Migration Tool](https://radicalnotion.ai/vendor/thimpress/learnpress-backup-and-migration-tool) (4 CVEs)
- [LearnPress – WordPress LMS Plugin](https://radicalnotion.ai/vendor/thimpress/learnpress-wordpress-lms-plugin) (4 CVEs)
- [Thim Elementor Kit](https://radicalnotion.ai/vendor/thimpress/thim-elementor-kit) (4 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/thimpress/learnpress-export-import). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.