Known vulnerabilities in LearnPress - WordPress LMS Plugin

Vendor: ThimPress
Software CPE: cpe:2.3:a:thongta:learnpress:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 11
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting LearnPress - WordPress LMS Plugin LearnPress - WordPress LMS Plugin is affected by 11 known vulnerabilities: 1 high, 5 medium, 5 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121949 - Missing Authorization
CVE-2025-14798
CWE-862 Medium
No
No
4.3.2.5 22.01.2026 SB2026012236
#VU57614 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-39348
CWE-79 Low
No
No
4.1.3.2 22.10.2021 SB2021102212
#VU57613 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-24702
CWE-79 Low
No
No
4.1.3.1 22.10.2021 SB2021102211
#VU57576 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-39349
CWE-79 Low
No
No
4.1.3.2 20.10.2021 SB2021102012
#VU46562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
3.2.7.3 10.09.2020 SB2020091005
#VU46561 - Cross-Site Request Forgery (CSRF)
CWE-352 Low
No
No
3.2.7.3 10.09.2020 SB2020091005
#VU27489 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6010
CWE-89 Medium
Available
No
3.2.6.8 04.05.2020 SB2020050408
#VU27425 - Permissions, Privileges, and Access Controls
CVE-2020-11511
CWE-264 High
Available
No
3.2.6.9 29.04.2020 SB2020042909
#VU27424 - Improper Access Control
CVE-2020-11510
CWE-284 Medium
No
No
3.2.6.9 29.04.2020 SB2020042909
#VU26107 - Permissions, Privileges, and Access Controls
CVE-2020-7917
CWE-264 Medium
No
No
3.2.6.7 17.03.2020 SB2020031707
#VU26106 - Permissions, Privileges, and Access Controls
CVE-2020-7916
CWE-264 Medium
No
No
3.2.6.7 17.03.2020 SB2020031707