T
Vendor security profile
ThimPress
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical1
CISA KEV0
Public exploit0
Patch rate%7
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
1
0
2
4
6
CVE KEV
CVE severity distribution
14toplam CVE
Critical1 (7%)
High4 (29%)
Medium9 (64%)
Patch and exploitation view
%7
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
13Unknown
Latest vulnerabilities
7.1
CVE-2026-104670
WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability
T
Patch status unknownEPSS %0
5.1
CVE-2026-105397
LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation
T
Patch verifiedEPSS %0
6.1
CVE-2026-92538
LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter
T
Patch status unknownEPSS %0
4.3
CVE-2026-39717
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
T
Patch status unknownEPSS %0
5.3
CVE-2026-104403
WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability
T
Patch status unknownEPSS %0
7.5
CVE-2026-93882
LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter
T
Patch status unknownEPSS %0
6.4
CVE-2026-12230
LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'
T
Patch status unknownEPSS %0
5.1
CVE-2026-82024
LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles
T
Patch status unknownEPSS %0
5.3
CVE-2026-82023
LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
T
Patch status unknownEPSS %0
4.9
CVE-2026-77823
LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
T
Patch status unknownEPSS %0