Read the docs

ThimPress

Records156All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical23CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9

Exploited now

ThimPress records in CISA KEV

No ThimPress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Learnpress 45 records HIGH Wp Hotel Booking 12 records HIGH Wp Pipes 9 records MEDIUM Eduma 1 record LOW Learnpress Export Import 1 record LOW Wp Events Manager 1 record MEDIUM

Records

1 record in Wp Events Manager · all components

TI-2024-07154 CVE-2024-7717 · GHSA-mjc4-387q-mg84

WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection

Priority MEDIUM 41

The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 2.1.11 due to insufficient escaping on the user supplied parameter and…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00498 Published 2024-08-31 No fix listed CWE-89
Open these records in search →