Vulnerabilities > Thimpress

DATE CVE VULNERABILITY TITLE RISK
2024-01-16 CVE-2023-5558 Cross-site Scripting vulnerability in Thimpress Learnpress
The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
network
low complexity
thimpress CWE-79
6.1
2024-01-11 CVE-2023-6567 SQL Injection vulnerability in Thimpress Learnpress
The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
thimpress CWE-89
7.5
2024-01-11 CVE-2023-6634 Command Injection vulnerability in Thimpress Learnpress
The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function.
network
low complexity
thimpress CWE-77
critical
9.8
2024-01-11 CVE-2023-6223 Authorization Bypass Through User-Controlled Key vulnerability in Thimpress Learnpress
The LearnPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.5.7 via the /wp-json/lp/v1/profile/course-tab REST API due to missing validation on the 'userID' user controlled key.
network
low complexity
thimpress CWE-639
4.3
2023-11-20 CVE-2023-5651 Incorrect Permission Assignment for Critical Resource vulnerability in Thimpress WP Hotel Booking
The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensure that the package to be deleted is a package, allowing any authenticated users, such as subscriber to delete arbitrary posts
network
low complexity
thimpress CWE-732
5.4
2023-11-20 CVE-2023-5652 SQL Injection vulnerability in Thimpress WP Hotel Booking
The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections
network
low complexity
thimpress CWE-89
critical
9.8
2023-11-20 CVE-2023-5799 Incorrect Authorization vulnerability in Thimpress WP Hotel Booking
The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete posts that do no belong to them
network
low complexity
thimpress CWE-863
5.4
2023-10-03 CVE-2023-40009 Cross-Site Request Forgery (CSRF) vulnerability in Thimpress WP Pipes
Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Pipes plugin <= 1.4.0 versions.
network
low complexity
thimpress CWE-352
6.5
2023-07-12 CVE-2020-36757 Unspecified vulnerability in Thimpress WP Hotel Booking
The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.10.1.
network
low complexity
thimpress
4.3
2023-05-18 CVE-2023-30487 Cross-site Scripting vulnerability in Thimpress Learnpress
Unauth.
network
low complexity
thimpress CWE-79
6.1