Broken Access Control in ThimPress LearnPress Plugin
CVE-2025-22739

5.3MEDIUM

Key Information:

Vendor

Thimpress

Status
Learnpress
Vendor
CVE Published:
27 March 2025

What is CVE-2025-22739?

The ThimPress LearnPress plugin is affected by a missing authorization vulnerability that allows attackers to exploit incorrectly configured access control security levels. This could enable unauthorized users to gain access to restricted functionalities within the LearnPress plugin. Affected versions include all versions up to and including 4.2.7.5. It is crucial for users of this plugin to ensure they are using the latest version and to review their access controls to mitigate potential risks.

Affected Version(s)

LearnPress 0 <= 4.2.7.5

References

https://patchstack.com/database/Wordpress/Plugin/learnpre...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

David Ojeda Guijarro (Patchstack Alliance)
.