What’s Vulnerable › Products

thimpress LearnPress – Backup & Migration Tool vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your thimpress LearnPress – Backup & Migration Tool version is affected

Latest thimpress LearnPress – Backup & Migration Tool vulnerabilities

• CVE-2026-7566 — LearnPress – Backup & Migration Tool <= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload (CVSS 6.6)
• CVE-2026-7565 — LearnPress <= 4.1.4 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'import-user-file' Parameter (CVSS 4.9)
• CVE-2026-1787 — LearnPress Export Import <= 4.1.0 - Missing Authentication to Unauthenticated Migrated Course Deletion (CVSS 4.8)
• CVE-2024-9609 — LearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site Scripting (CVSS 6.1)