Vulnerability intelligence

CVE-2026-7565

thimpress LearnPress – Backup & Migration Tool CWE-22

The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Traversal in all versions up to, and including, 4.1.4 via the 'import-user-file' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

CVSS Score

4.9

Medium

EPSS — Exploit Probability

1.0%

Riskier than 61% of all CVEs · checked 2026-10-22

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Unconfirmed

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Sep 8, 2026 · latest Sep 8, 2026

Coverage timeline

Adobe Magento Flaw Enables Unauthenticated Code Execution in Attacks
securityonline.info · Sep 8, 2026