目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

ThimPress 厂商漏洞列表 / CVE 中文分析 120

ThimPress 厂商相关 120 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

ThimPress 主要开发 WordPress 插件，核心用途在于提供页面构建、电商及表单功能。其历史漏洞记录显示，常见风险包括跨站脚本（XSS）、任意文件读取及未授权访问，部分版本存在远程代码执行隐患。截至最新统计，该项目已收录 100 条 CVE，反映出其代码库在输入验证与权限控制方面存在长期安全短板，用户需及时更新以规避潜在攻击风险。

Top products by ThimPress: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses WP Hotel Booking LearnPress WP Pipes LearnPress Export Import Thim Elementor Kit Eduma LearnPress – Backup & Migration Tool LearnPress – WordPress LMS Plugin Thim Core WP Events Manager Sailing RealPress Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor BuilderPress LearnPress – Sepay Payment FundPress – WordPress Donation Plugin LearnPress – Course Review Thim Blocks Resca Course Builder Ivy School FundPress
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-24361 WordPress plugin LearnPress – Course Review 安全漏洞 — LearnPress – Course Review CWE-79 6.5 Medium 2026-01-22
CVE-2025-14798 WordPress plugin LearnPress 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 5.3 Medium 2026-01-20
CVE-2025-13725 WordPress plugin Gutenberg Thim Blocks – Page Builder, Gutenberg Blocks for the Block Editor 路径遍历漏洞 — Thim Blocks CWE-22 6.5 Medium 2026-01-17
CVE-2025-14075 WordPress plugin WP Hotel Booking 信息泄露漏洞 — WP Hotel Booking CWE-200 5.3 Medium 2026-01-17
CVE-2025-14802 WordPress plugin LearnPress 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-639 5.4 Medium 2026-01-07
CVE-2025-13964 WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 5.3 Medium 2026-01-06
CVE-2025-53344 WordPress plugin Thim Core 跨站请求伪造漏洞 — Thim Core CWE-352 4.3 Medium 2026-01-05
CVE-2025-66054 WordPress plugin LearnPress 安全漏洞 — LearnPress CWE-862 7.5 High 2025-12-18
CVE-2025-13956 WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 5.3 Medium 2025-12-16
CVE-2025-14387 WordPress plugin LearnPress – WordPress LMS Plugin 跨站脚本漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-79 6.4 Medium 2025-12-15
CVE-2025-63013 WordPress plugin WP Hotel Booking 安全漏洞 — WP Hotel Booking CWE-497 4.3 Medium 2025-12-09
CVE-2025-63011 WordPress plugin WP Hotel Booking 跨站脚本漏洞 — WP Hotel Booking CWE-79 5.9 Medium 2025-12-09
CVE-2025-63012 WordPress plugin WP Hotel Booking 安全漏洞 — WP Hotel Booking CWE-352 4.3 Medium 2025-12-09
CVE-2025-67594 WordPress plugin Thim Elementor Kit 安全漏洞 — Thim Elementor Kit CWE-639 4.3 Medium 2025-12-09
CVE-2025-67573 WordPress plugin Sailing 安全漏洞 — Sailing CWE-862 5.3 Medium 2025-12-09
CVE-2025-67536 WordPress plugin LearnPress 安全漏洞 — LearnPress CWE-79 6.5 Medium 2025-12-09
CVE-2025-67526 WordPress plugin Sailing 安全漏洞 — Sailing CWE-98 7.5 High 2025-12-09
CVE-2025-11368 WordPress plugin LearnPress 信息泄露漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-200 5.3 Medium 2025-11-21
CVE-2025-60200 WordPress plugin LearnPress Export Import 安全漏洞 — LearnPress Export Import CWE-98 7.5 High 2025-11-06
CVE-2025-54721 WordPress plugin Resca 安全漏洞 — Resca CWE-79 7.1 High 2025-11-06
CVE-2025-64195 WordPress plugin Eduma 安全漏洞 — Eduma CWE-98 7.5 High 2025-10-29
CVE-2025-64194 WordPress plugin Eduma 安全漏洞 — Eduma CWE-79 6.5 Medium 2025-10-29
CVE-2025-60227 WordPress plugin WP Pipes 路径遍历漏洞 — WP Pipes CWE-22 8.6 High 2025-10-22
CVE-2025-49992 WordPress plugin LearnPress Export Import 跨站脚本漏洞 — LearnPress Export Import CWE-79 7.1 High 2025-10-22
CVE-2025-11372 WordPress plugin LearnPress 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 6.5 Medium 2025-10-18
CVE-2025-57987 WordPress plugin WP Events Manager 安全漏洞 — WP Events Manager CWE-862 5.3 Medium 2025-09-22
CVE-2025-28977 WordPress plugin WP Pipes 跨站脚本漏洞 — WP Pipes CWE-79 7.1 High 2025-08-20
CVE-2025-28979 WordPress plugin WP Pipes 安全漏洞 — WP Pipes CWE-98 8.1 High 2025-08-14
CVE-2025-28982 WordPress plugin WP Pipes SQL注入漏洞 — WP Pipes CWE-89 9.3 Critical 2025-07-16
CVE-2025-48267 WordPress plugin WP Pipes 路径遍历漏洞 — WP Pipes CWE-22 8.6 High 2025-06-09

本页汇总了 ThimPress 厂商截至目前公开的全部 120 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。