ThimPress LearnPress – Backup & Migration Tool

• CVE-2026-7566 Medium 6.6 LearnPress – Backup & Migration Tool <= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload 0.4%
• CVE-2026-7565 Medium 4.9 LearnPress <= 4.1.4 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'import-user-file' Parameter 0.7%
• CVE-2026-1787 Medium 4.8 LearnPress Export Import <= 4.1.0 - Missing Authentication to Unauthenticated Migrated Course Deletion 0.3%
• CVE-2024-9609 Medium 6.1 LearnPress Export Import – WordPress extension for LearnPress <= 4.0.4 - Reflected Cross-Site Scripting 0.4%