Thimpress ≫ Learnpress

69 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

9.8

CVE-2024-4434

Exploit

EPSS 36.93%
Veröffentlicht 14.05.2024 15:43:44
Zuletzt bearbeitet 08.04.2026 17:18:54

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘term_id’ parameter in versions up to, and including, 4.2.6.5 due to insufficient escaping on the user supplied parameter and lack of suffici...

8.8

CVE-2024-4397

EPSS 1.03%
Veröffentlicht 14.05.2024 15:43:31
Zuletzt bearbeitet 08.04.2026 19:21:37

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_post_materials' function in versions up to, and including, 4.2.6.5. This makes it possible for authent...

5.4

CVE-2024-4277

EPSS 0.34%
Veröffentlicht 14.05.2024 15:43:12
Zuletzt bearbeitet 08.04.2026 18:21:44

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layout_html’ parameter in all versions up to, and including, 4.2.6.5 due to insufficient input sanitization and output escaping. This mak...

5.4

CVE-2024-3560

EPSS 0.32%
Veröffentlicht 19.04.2024 02:15:10
Zuletzt bearbeitet 08.04.2026 18:21:27

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _id value in all versions up to, and including, 4.2.6.4 due to insufficient input sanitization and output escaping on user supplied attrib...

7.1

CVE-2024-32588

EPSS 0.55%
Veröffentlicht 18.04.2024 09:15:12
Zuletzt bearbeitet 28.04.2026 19:24:49

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress Export Import allows Reflected XSS.This issue affects LearnPress Export Import: from n/a through 4.0.3.

4.8

CVE-2024-1463

EPSS 0.43%
Veröffentlicht 09.04.2024 19:15:17
Zuletzt bearbeitet 08.04.2026 19:20:42

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Course, Lesson, and Quiz title and content in all versions up to, and including, 4.2.6.3 due to insufficient input sanitization and output...

5.4

CVE-2024-1289

EPSS 0.39%
Veröffentlicht 09.04.2024 19:15:15
Zuletzt bearbeitet 08.04.2026 17:18:17

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.6.3 due to missing validation on a user controlled key when looking up order information. This make...

7.6

CVE-2024-31241

EPSS 0.49%
Veröffentlicht 07.04.2024 18:15:09
Zuletzt bearbeitet 28.04.2026 19:24:16

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThimPress LearnPress Export Import.This issue affects LearnPress Export Import: from n/a through 4.0.3.

8.8

CVE-2024-2115

EPSS 0.27%
Veröffentlicht 05.04.2024 08:15:07
Zuletzt bearbeitet 08.04.2026 18:20:59

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.0. This is due to missing or incorrect nonce validation on the filter_users functions. This makes it poss...

6.1

CVE-2023-5558