ThimPress Course Builder vulnerabilities

Latest ThimPress Course Builder CVEs

Newest publication first

1. CVE-2025-48336 WordPress Course Builder < 3.6.6 - PHP Object Injection Vulnerability

   Published 2025-05-29

   Critical·CVSS 9.8 EPSS 0.49%

   Deserialization of Untrusted Data vulnerability in ThimPress Course Builder course-builder allows Object Injection.This issue affects Course Builder: from n/a through < 3.6.6.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.