CVE-2026-118054 | ThimPress LearnPress Course Review Plugin up to 4.2.2 on WordPress review_title cross site scripting

November 7, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ThimPress LearnPress Course Review Plugin up to 4.2.2 on WordPress. The affected element is an unknown function. Executing a manipulation of the argument review_title can lead to cross site scripting.

This vulnerability is handled as CVE-2026-118054. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More