ThimPress LearnPress – Course Review

• CVE-2026-118054 Medium 6.4 LearnPress <= 4.2.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'review_title' Parameter –
• CVE-2026-24361 Medium 6.5 WordPress LearnPress – Course Review plugin <= 4.1.9 - Cross Site Scripting (XSS) vulnerability 0.2%