---
title: "ThimPress Thim Elementor Kit vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/thimpress/thim-elementor-kit
type: product
description: "ThimPress Thim Elementor Kit has 4 published CVEs, 0 in CISA KEV and 0 with public exploits."
updated: 2025-12-09
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# ThimPress Thim Elementor Kit vulnerabilities

Vendor: [ThimPress](https://radicalnotion.ai/vendor/thimpress)

- **Published CVEs:** 4
- **In CISA KEV:** 0
- **With a public exploit:** 0
- **With a patch:** 4
- **Average CVSS:** 5.4
- **First CVE:** 2024-05-09
- **Latest CVE:** 2025-12-09

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 0 |
| Medium | 4 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2 |
| [CWE-639](https://radicalnotion.ai/cwe/cwe-639) | Authorization Bypass Through User-Controlled Key | 1 |
| [CWE-862](https://radicalnotion.ai/cwe/cwe-862) | Missing Authorization | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2024 | 1 |
| 2025 | 3 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| \<= 1.1.8 | range | 1 |
| \<= 1.2.8 | range | 1 |
| \<= 1.2.9 | range | 1 |
| \<= 1.3.3 | range | 1 |
| \>= 1.1.9 | range | 1 |
| \>= 1.2.9 | range | 1 |
| \>= 1.2.9.1 | range | 1 |
| \>= 1.3.4 | range | 1 |
| 1.1.9 | patched | 1 |
| 1.2.9 | patched | 1 |
| 1.2.9.1 | patched | 1 |
| 1.3.4 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2025-67594 | WordPress Thim Elementor Kit plugin \<= 1.3.3 - Insecure Direct Object References (IDOR) vulnerability | medium | 4.3 | No | No | Yes |
| CVE-2025-24725 | WordPress Thim Elementor Kit Plugin \<= 1.2.8 - Broken Access Control vulnerability | medium | 4.3 | No | No | Yes |
| CVE-2025-22312 | WordPress Thim Elementor Kit plugin \<= 1.2.9 - Cross Site Scripting (XSS) vulnerability | medium | 6.5 | No | No | Yes |
| CVE-2024-34415 | WordPress Thim Elementor Kit plugin \<= 1.1.8 - Cross Site Scripting (XSS) vulnerability | medium | 6.5 | No | No | Yes |

## Frequently asked questions

### How many CVEs does ThimPress Thim Elementor Kit have?

ThimPress Thim Elementor Kit has 4 published CVE records since 2024.

### How many ThimPress Thim Elementor Kit CVEs are in CISA KEV?

None of ThimPress Thim Elementor Kit's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for ThimPress Thim Elementor Kit vulnerabilities?

No ThimPress Thim Elementor Kit CVEs currently have a tracked public exploit in this dataset.

### Which versions of ThimPress Thim Elementor Kit are affected?

12 distinct ThimPress Thim Elementor Kit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in ThimPress Thim Elementor Kit CVEs?

ThimPress Thim Elementor Kit's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).

### What is the average severity of ThimPress Thim Elementor Kit CVEs?

The average CVSS base score across ThimPress Thim Elementor Kit's scored CVEs is 5.4.

## Other products from this vendor

- [LearnPress](https://radicalnotion.ai/vendor/thimpress/learnpress) (66 CVEs)
- [LearnPress – WordPress LMS Plugin for Create and Sell Online Courses](https://radicalnotion.ai/vendor/thimpress/learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses) (45 CVEs)
- [WP Hotel Booking](https://radicalnotion.ai/vendor/thimpress/wp-hotel-booking) (21 CVEs)
- [WP Pipes](https://radicalnotion.ai/vendor/thimpress/wp-pipes) (9 CVEs)
- [LearnPress Export Import](https://radicalnotion.ai/vendor/thimpress/learnpress-export-import) (6 CVEs)
- [Eduma](https://radicalnotion.ai/vendor/thimpress/eduma) (4 CVEs)
- [LearnPress – Backup & Migration Tool](https://radicalnotion.ai/vendor/thimpress/learnpress-backup-and-migration-tool) (4 CVEs)
- [LearnPress – WordPress LMS Plugin](https://radicalnotion.ai/vendor/thimpress/learnpress-wordpress-lms-plugin) (4 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/thimpress/thim-elementor-kit). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.