Codexpert Inc ThumbPress vulnerabilities

Latest Codexpert Inc ThumbPress CVEs

Newest publication first

1. CVE-2026-32549 WordPress ThumbPress plugin < 6.5 - Broken Access Control vulnerability

   Published 2026-08-18

   High·CVSS 7.5 EPSS 0.39%

   Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.

2. CVE-2026-57720 WordPress ThumbPress plugin <= 6.3.2 - Broken Access Control vulnerability

   Published 2026-07-01

   Medium·CVSS 4.3 EPSS 0.33%

   Missing Authorization vulnerability in Codexpert Inc ThumbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ThumbPress: from n/a through 6.3.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.