ThimPress · weakness class
SQL Injection
18 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 7
- likely to be exploited
- 1
Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.
- WP Hotel Booking <= 2.0.7 - SQL Injection
- LearnPress < 4.2.7.1 - SQL Injection
- LearnPress <= 4.2.5.7 - SQL Injection
- LearnPress WordPress LMS Plugin <= 4.2.6.5 - SQL Injection
- LearnPress < 4.2.7.1 - SQL Injection
- LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi
- WP Hotel Booking <= 2.1.0 - SQL Injection
- LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection
- LearnPress < 4.1.4 - Admin+ SQL Injection
- SQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.
- WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection
- WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi)
- LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter
- WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection
- WordPress LearnPress Export Import plugin <= 4.0.3 - Auth. SQL Injection vulnerability
- WordPress WP Pipes plugin <= 1.4.3 - SQL Injection Vulnerability
- LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
- WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.