---
title: "ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/thimpress/learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses
type: product
description: "ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses has 45 published CVEs, 0 in CISA KEV and 5 with public exploits."
updated: 2026-10-17
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses vulnerabilities

Vendor: [ThimPress](https://radicalnotion.ai/vendor/thimpress)

- **Published CVEs:** 45
- **In CISA KEV:** 0
- **With a public exploit:** 5
- **With a patch:** 45
- **Average CVSS:** 6.7
- **First CVE:** 2024-01-11
- **Latest CVE:** 2026-10-17

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 7 |
| High | 7 |
| Medium | 31 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-862](https://radicalnotion.ai/cwe/cwe-862) | Missing Authorization | 12 |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 11 |
| [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 6 |
| [CWE-639](https://radicalnotion.ai/cwe/cwe-639) | Authorization Bypass Through User-Controlled Key | 5 |
| [CWE-420](https://radicalnotion.ai/cwe/cwe-420) | Unprotected Alternate Channel | 2 |
| [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 2 |
| [CWE-88](https://radicalnotion.ai/cwe/cwe-88) | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') | 1 |
| [CWE-98](https://radicalnotion.ai/cwe/cwe-98) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2024 | 20 |
| 2025 | 5 |
| 2026 | 20 |

## Affected versions (top 12 of 30)

| Version | Kind | CVEs |
| --- | --- | --- |
| \<= 4.2.6.5 | range | 4 |
| \<= 4.2.5.7 | range | 3 |
| \<= 4.3.2.8 | range | 3 |
| \<= 4.4.10 | range | 3 |
| \<= 4.2.6.3 | range | 2 |
| \<= 4.2.6.8.1 | range | 2 |
| \<= 4.2.7 | range | 2 |
| \<= 4.3.1 | range | 2 |
| \<= 4.3.9.1 | range | 2 |
| \<= 4.4.4 | range | 2 |
| \<= 4.0.0 | range | 1 |
| \<= 4.2.6.4 | range | 1 |

## CVEs (first 30 of 45, most severe first)

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-107744 | LearnPress \<= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action | medium | 6.5 | No | No | Yes |
| CVE-2026-104736 | LearnPress \<= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter | critical | 9.8 | No | No | Yes |
| CVE-2026-109208 | LearnPress \<= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order\_comments' Parameters | high | 7.2 | No | No | Yes |
| CVE-2026-92538 | LearnPress \<= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter | medium | 6.1 | No | No | Yes |
| CVE-2026-93882 | LearnPress \<= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item\_id' Parameter | high | 7.5 | No | No | Yes |
| CVE-2026-12230 | LearnPress \<= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout\_custom\_css' | medium | 6.4 | No | No | Yes |
| CVE-2026-77823 | LearnPress \<= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter | medium | 4.9 | No | No | Yes |
| CVE-2026-75982 | LearnPress \<= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field\_name' Parameter | medium | 4.4 | No | No | Yes |
| CVE-2026-13765 | LearnPress \<= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints | high | 7.5 | No | No | Yes |
| CVE-2026-12732 | LearnPress \<= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class\_wrapper\_form' Shortcode Attribute | medium | 6.4 | No | No | Yes |
| CVE-2026-11988 | LearnPress \<= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameter | medium | 6.5 | No | No | Yes |
| CVE-2026-8502 | LearnPress \<= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c\_status' and 'return\_type' Parameters | medium | 5.3 | No | No | Yes |
| CVE-2026-7648 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses \<= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter | medium | 4.3 | No | No | Yes |
| CVE-2026-4365 | LearnPress \<= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion | critical | 9.1 | No | No | Yes |
| CVE-2026-4333 | LearnPress \<= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute | medium | 6.4 | No | No | Yes |
| CVE-2026-3225 | LearnPress \<= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion | medium | 4.3 | No | No | Yes |
| CVE-2026-3226 | LearnPress \<= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering | medium | 4.3 | No | No | Yes |
| CVE-2025-14798 | LearnPress – WordPress LMS Plugin \<= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API | medium | 5.3 | No | No | Yes |
| CVE-2025-14802 | LearnPress – WordPress LMS Plugin \<= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion | medium | 5.4 | No | No | Yes |
| CVE-2025-13964 | LearnPress – WordPress LMS Plugin \<= 4.3.2 - Missing Authentication to Unauthenticated Course Modification | medium | 5.3 | No | No | Yes |
| CVE-2025-13956 | LearnPress – WordPress LMS Plugin \<= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposure | medium | 5.3 | No | No | Yes |
| CVE-2025-14387 | LearnPress – WordPress LMS Plugin \<= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get\_profile\_social | medium | 6.4 | No | No | Yes |
| CVE-2025-11368 | LearnPress – WordPress LMS Plugin \<= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure | medium | 5.3 | No | No | Yes |
| CVE-2025-11372 | LearnPress – WordPress LMS Plugin \<= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation | medium | 6.5 | No | No | Yes |
| CVE-2024-13599 | LearnPress – WordPress LMS Plugin \<= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name | medium | 6.4 | No | No | Yes |
| CVE-2024-11868 | LearnPress – WordPress LMS Plugin \<= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API | medium | 5.3 | No | No | Yes |
| CVE-2024-8522 | LearnPress – WordPress LMS Plugin \<= 4.2.7 - Unauthenticated SQL Injection via 'c\_only\_fields' | critical | 10.0 | No | Yes | Yes |
| CVE-2024-8529 | LearnPress – WordPress LMS Plugin \<= 4.2.7 - Unauthenticated SQL Injection via 'c\_fields' | critical | 10.0 | No | Yes | Yes |
| CVE-2024-7548 | LearnPress – WordPress LMS Plugin \<= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter | high | 8.8 | No | No | Yes |
| CVE-2024-6589 | LearnPress \<= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion | high | 8.8 | No | No | Yes |

## Frequently asked questions

### How many CVEs does ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses have?

ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses has 45 published CVE records since 2024.

### How many ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CVEs are in CISA KEV?

None of ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses vulnerabilities?

Yes — 5 of ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses's CVEs have a known public exploit.

### Which versions of ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses are affected?

30 distinct ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CVEs?

ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-639 (Authorization Bypass Through User-Controlled Key).

### How many critical ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses vulnerabilities are there?

ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses has 7 critical and 7 high-severity CVEs.

### What is the average severity of ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CVEs?

The average CVSS base score across ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses's scored CVEs is 6.7.

## Other products from this vendor

- [LearnPress](https://radicalnotion.ai/vendor/thimpress/learnpress) (66 CVEs)
- [WP Hotel Booking](https://radicalnotion.ai/vendor/thimpress/wp-hotel-booking) (21 CVEs)
- [WP Pipes](https://radicalnotion.ai/vendor/thimpress/wp-pipes) (9 CVEs)
- [LearnPress Export Import](https://radicalnotion.ai/vendor/thimpress/learnpress-export-import) (6 CVEs)
- [Eduma](https://radicalnotion.ai/vendor/thimpress/eduma) (4 CVEs)
- [LearnPress – Backup & Migration Tool](https://radicalnotion.ai/vendor/thimpress/learnpress-backup-and-migration-tool) (4 CVEs)
- [LearnPress – WordPress LMS Plugin](https://radicalnotion.ai/vendor/thimpress/learnpress-wordpress-lms-plugin) (4 CVEs)
- [Thim Elementor Kit](https://radicalnotion.ai/vendor/thimpress/thim-elementor-kit) (4 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/thimpress/learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.