thimpress Vulnerabilities and Affected Products
Vulnerabilities associated with LearnPress – WordPress LMS Plugin.
Products
Clear product- LearnPress – WordPress LMS Plugin for Create and Sell Online Courses37 vulnerabilities
- learnpress30 vulnerabilities
- WP Hotel Booking17 vulnerabilities
- WP Pipes9 vulnerabilities
- LearnPress Export Import5 vulnerabilities
- wp_hotel_booking5 vulnerabilities
- Eduma4 vulnerabilities
- LearnPress – Backup & Migration Tool4 vulnerabilities
- Thim Elementor Kit4 vulnerabilities
- LearnPress – WordPress LMS Plugin3 vulnerabilities
- Thim Core3 vulnerabilities
- RealPress2 vulnerabilities
- Sailing2 vulnerabilities
- Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor2 vulnerabilities
- WP Events Manager2 vulnerabilities
- BuilderPress1 vulnerability
- Course Builder1 vulnerability
- FundPress1 vulnerability
- FundPress – WordPress Donation Plugin1 vulnerability
- Ivy School1 vulnerability
- LearnPress – Course Review1 vulnerability
- LearnPress – Sepay Payment1 vulnerability
- Resca1 vulnerability
- Thim Blocks1 vulnerability
- wp_events_manager1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-45820CRITICAL | WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL InjectionSQL Injection (SQLi) vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. CWE-89Jan 24, 2023 | CVSS9.1v3.1 | EPSS1.01% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-45808CRITICAL | WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL InjectionSQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. | CVSS9.9v3.1 | EPSS4.27% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2022-47615CRITICAL | WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File InclusionLocal File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. | CVSS9.3v3.1 | EPSS5.06% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |