CVE-2026-110363: Missing Authorization in ThimPress LearnPress

This vulnerability in ThimPress LearnPress is caused by missing authorization checks, which results in incorrectly configured access control security levels. It affects all versions from the initial release up to and including 4.4.10. The CVSS 3.1 base score is 5.4, reflecting a network attack vector with low privileges required and no user interaction needed. The impact includes limited confidentiality and integrity loss but no availability impact. There is no indication of known exploits in the wild or a vendor-provided patch at this time.

An attacker with low privileges can exploit this vulnerability remotely without user interaction to gain unauthorized access or perform unauthorized actions, leading to limited confidentiality and integrity impacts. There is no reported impact on availability. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, review and tighten access control configurations where possible to mitigate risk.