sales@hackhalt.com

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total4
Critical0
High0
Medium4
Reset
Showing 1-4 of 4 records
Threat Entry Updated 2026-06-17

Thim Elementor Kit - Security Vulnerability (CVE-2026-1870)

The Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing validation checks on the 'thim-ekit/archive-course/get-courses' REST endpoint callback function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to disclose private or draft LearnPress course content by supplying post_status in the params_url payload.

PLUGIN Thim Elementor Kit

CVE-2026-1870

MEDIUM CVSS 5.3 2026-03-16
Threat Entry Updated 2026-06-17

Thim Elementor Kit - Broken Access Control (CVE-2025-67594)

Authorization Bypass Through User-Controlled Key vulnerability in ThimPress Thim Elementor Kit thim-elementor-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thim Elementor Kit: from n/a through

PLUGIN Thim Elementor Kit

CVE-2025-67594

MEDIUM CVSS 4.3 2025-12-09
Threat Entry Updated 2026-06-17

Thim Elementor Kit - Cross-Site Scripting (XSS) (CVE-2024-4329)

The Thim Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Thim Elementor Kit

CVE-2024-4329

MEDIUM CVSS 6.4 2024-05-14