{"schema_version":1,"title":"ThimPress LearnPress vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in ThimPress LearnPress: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-82024, was published on 3 September 2026.","url":"https://junglewise.ai/threats/technologies/learnpress","json_url":"https://junglewise.ai/threats/technologies/learnpress.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/learnpress","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":6,"last_365_days":11},"latest":[{"cve":"CVE-2026-82024","cvss":5.4,"epss":0.0024,"slug":"cve-2026-82024-learnpress-wordpress-plugin-stored-cross-site-scripting-in-quiz","title":"LearnPress WordPress Plugin stored cross-site scripting in quiz answers","severity":"medium","exploited":false,"published_at":"2026-09-03T18:17:24.41+00:00","url":"https://junglewise.ai/threats/cve-2026-82024-learnpress-wordpress-plugin-stored-cross-site-scripting-in-quiz"},{"cve":"CVE-2026-82023","cvss":4.3,"epss":0.003,"slug":"cve-2026-82023-learnpress-broken-object-level-authorization-in-quiz-answer","title":"LearnPress broken object-level authorization in quiz answer insertion","severity":"medium","exploited":false,"published_at":"2026-09-03T18:17:24.26+00:00","url":"https://junglewise.ai/threats/cve-2026-82023-learnpress-broken-object-level-authorization-in-quiz-answer"},{"cve":"CVE-2026-12970","cvss":7.1,"slug":"cve-2026-12970-learnpress-wordpress-plugin-reflected-xss-in-c-search-parameter","title":"LearnPress WordPress plugin reflected XSS in c_search parameter","severity":"info","exploited":false,"published_at":"2026-07-20T07:16:35.19+00:00","url":"https://junglewise.ai/threats/cve-2026-12970-learnpress-wordpress-plugin-reflected-xss-in-c-search-parameter"},{"cve":"CVE-2026-13765","cvss":7.5,"slug":"cve-2026-13765-thimpress-learnpress-sensitive-information-exposure-in-check","title":"ThimPress LearnPress sensitive information exposure in check_answer","severity":"high","exploited":false,"published_at":"2026-07-17T05:16:37.837+00:00","url":"https://junglewise.ai/threats/cve-2026-13765-thimpress-learnpress-sensitive-information-exposure-in-check"},{"cve":"CVE-2026-12732","cvss":6.4,"slug":"cve-2026-12732-thimpress-learnpress-stored-xss-in-class-wrapper-form-shortcode","title":"Thimpress LearnPress Stored XSS in class_wrapper_form shortcode","severity":"medium","exploited":false,"published_at":"2026-07-01T08:16:21.487+00:00","url":"https://junglewise.ai/threats/cve-2026-12732-thimpress-learnpress-stored-xss-in-class-wrapper-form-shortcode"},{"cve":"CVE-2026-11988","cvss":6.5,"slug":"cve-2026-11988-thimpress-learnpress-idor-in-userid-parameter","title":"ThimPress LearnPress IDOR in userId parameter","severity":"medium","exploited":false,"published_at":"2026-07-01T05:16:16.75+00:00","url":"https://junglewise.ai/threats/cve-2026-11988-thimpress-learnpress-idor-in-userid-parameter"},{"cve":"CVE-2026-8383","cvss":5.3,"epss":0.0025,"slug":"cve-2026-8383-learnpress-wordpress-plugin-missing-authorization-in-rest-api","title":"LearnPress WordPress plugin missing authorization in REST API","severity":"medium","exploited":false,"published_at":"2026-06-17T13:21:22.303+00:00","url":"https://junglewise.ai/threats/cve-2026-8383-learnpress-wordpress-plugin-missing-authorization-in-rest-api"},{"cve":"CVE-2026-8502","cvss":5.3,"slug":"cve-2026-8502-learnpress-wordpress-plugin-sensitive-information-exposure-in-rest","title":"LearnPress WordPress Plugin Sensitive Information Exposure in REST API","severity":"medium","exploited":false,"published_at":"2026-06-06T04:17:41.357+00:00","url":"https://junglewise.ai/threats/cve-2026-8502-learnpress-wordpress-plugin-sensitive-information-exposure-in-rest"},{"cve":"CVE-2026-48865","cvss":7.1,"slug":"cve-2026-48865-thimpress-learnpress-reflected-xss","title":"ThimPress LearnPress reflected XSS","severity":"high","exploited":false,"published_at":"2026-06-01T15:16:38.15+00:00","url":"https://junglewise.ai/threats/cve-2026-48865-thimpress-learnpress-reflected-xss"},{"cve":"CVE-2026-7648","cvss":4.3,"slug":"cve-2026-7648-learnpress-wordpress-plugin-payment-bypass-in-rest-api","title":"LearnPress WordPress Plugin payment bypass in REST API","severity":"medium","exploited":false,"published_at":"2026-05-14T05:16:46.08+00:00","url":"https://junglewise.ai/threats/cve-2026-7648-learnpress-wordpress-plugin-payment-bypass-in-rest-api"},{"cve":"CVE-2026-4333","cvss":6.4,"epss":0.0031,"slug":"cve-2026-4333-thimpress-learnpress-stored-xss-in-learn-press-courses-shortcode","title":"ThimPress LearnPress Stored XSS in learn_press_courses shortcode","severity":"medium","exploited":false,"published_at":"2026-04-08T05:16:06.683+00:00","url":"https://junglewise.ai/threats/cve-2026-4333-thimpress-learnpress-stored-xss-in-learn-press-courses-shortcode"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"ThimPress LearnPress","slug":"learnpress","vendor":{"name":"ThimPress","slug":"thimpress","url":"https://junglewise.ai/threats/vendors/thimpress"},"aliases":[],"category":"library","homepage":"https://thimpress.com/product/learnpress-wordpress-lms-plugin/","repo_url":"https://github.com/LearnPress/LearnPress","description":"A comprehensive learning management system plugin for WordPress that allows users to create, manage, and sell courses online.","url":"https://junglewise.ai/threats/technologies/learnpress"},"most_severe":[{"cve":"CVE-2026-13765","cvss":7.5,"slug":"cve-2026-13765-thimpress-learnpress-sensitive-information-exposure-in-check","title":"ThimPress LearnPress sensitive information exposure in check_answer","severity":"high","exploited":false,"published_at":"2026-07-17T05:16:37.837+00:00","url":"https://junglewise.ai/threats/cve-2026-13765-thimpress-learnpress-sensitive-information-exposure-in-check"},{"cve":"CVE-2026-48865","cvss":7.1,"slug":"cve-2026-48865-thimpress-learnpress-reflected-xss","title":"ThimPress LearnPress reflected XSS","severity":"high","exploited":false,"published_at":"2026-06-01T15:16:38.15+00:00","url":"https://junglewise.ai/threats/cve-2026-48865-thimpress-learnpress-reflected-xss"},{"cve":"CVE-2026-11988","cvss":6.5,"slug":"cve-2026-11988-thimpress-learnpress-idor-in-userid-parameter","title":"ThimPress LearnPress IDOR in userId parameter","severity":"medium","exploited":false,"published_at":"2026-07-01T05:16:16.75+00:00","url":"https://junglewise.ai/threats/cve-2026-11988-thimpress-learnpress-idor-in-userid-parameter"},{"cve":"CVE-2026-4333","cvss":6.4,"epss":0.0031,"slug":"cve-2026-4333-thimpress-learnpress-stored-xss-in-learn-press-courses-shortcode","title":"ThimPress LearnPress Stored XSS in learn_press_courses shortcode","severity":"medium","exploited":false,"published_at":"2026-04-08T05:16:06.683+00:00","url":"https://junglewise.ai/threats/cve-2026-4333-thimpress-learnpress-stored-xss-in-learn-press-courses-shortcode"},{"cve":"CVE-2026-12732","cvss":6.4,"slug":"cve-2026-12732-thimpress-learnpress-stored-xss-in-class-wrapper-form-shortcode","title":"Thimpress LearnPress Stored XSS in class_wrapper_form shortcode","severity":"medium","exploited":false,"published_at":"2026-07-01T08:16:21.487+00:00","url":"https://junglewise.ai/threats/cve-2026-12732-thimpress-learnpress-stored-xss-in-class-wrapper-form-shortcode"},{"cve":"CVE-2026-82024","cvss":5.4,"epss":0.0024,"slug":"cve-2026-82024-learnpress-wordpress-plugin-stored-cross-site-scripting-in-quiz","title":"LearnPress WordPress Plugin stored cross-site scripting in quiz answers","severity":"medium","exploited":false,"published_at":"2026-09-03T18:17:24.41+00:00","url":"https://junglewise.ai/threats/cve-2026-82024-learnpress-wordpress-plugin-stored-cross-site-scripting-in-quiz"},{"cve":"CVE-2026-8383","cvss":5.3,"epss":0.0025,"slug":"cve-2026-8383-learnpress-wordpress-plugin-missing-authorization-in-rest-api","title":"LearnPress WordPress plugin missing authorization in REST API","severity":"medium","exploited":false,"published_at":"2026-06-17T13:21:22.303+00:00","url":"https://junglewise.ai/threats/cve-2026-8383-learnpress-wordpress-plugin-missing-authorization-in-rest-api"},{"cve":"CVE-2026-8502","cvss":5.3,"slug":"cve-2026-8502-learnpress-wordpress-plugin-sensitive-information-exposure-in-rest","title":"LearnPress WordPress Plugin Sensitive Information Exposure in REST API","severity":"medium","exploited":false,"published_at":"2026-06-06T04:17:41.357+00:00","url":"https://junglewise.ai/threats/cve-2026-8502-learnpress-wordpress-plugin-sensitive-information-exposure-in-rest"},{"cve":"CVE-2026-82023","cvss":4.3,"epss":0.003,"slug":"cve-2026-82023-learnpress-broken-object-level-authorization-in-quiz-answer","title":"LearnPress broken object-level authorization in quiz answer insertion","severity":"medium","exploited":false,"published_at":"2026-09-03T18:17:24.26+00:00","url":"https://junglewise.ai/threats/cve-2026-82023-learnpress-broken-object-level-authorization-in-quiz-answer"},{"cve":"CVE-2026-7648","cvss":4.3,"slug":"cve-2026-7648-learnpress-wordpress-plugin-payment-bypass-in-rest-api","title":"LearnPress WordPress Plugin payment bypass in REST API","severity":"medium","exploited":false,"published_at":"2026-05-14T05:16:46.08+00:00","url":"https://junglewise.ai/threats/cve-2026-7648-learnpress-wordpress-plugin-payment-bypass-in-rest-api"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}