CVE-2026-93882 | ThimPress LearnPress Plugin up to 4.4.8 on WordPress Course Material AJAX render_material_items course_id/item_id resource injection

October 1, 2026 Yanac

A vulnerability labeled as problematic has been found in ThimPress LearnPress Plugin up to 4.4.8 on WordPress. This impacts the function CourseMaterialTemplate::render_material_items of the component Course Material AJAX Handler. Such manipulation of the argument course_id/item_id leads to improper control of resource identifiers.

This vulnerability is referenced as CVE-2026-93882. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More