PT-2026-1306 · Thimpress · Thimpress Thim Core

Ananda Dhakal · Publicado 2026-01-05 · Atualizado 2026-01-05 · CVE-2025-53344

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ThimPress Thim Core versions through 2.3.3

Description A Cross-Site Request Forgery (CSRF) issue exists in ThimPress Thim Core. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge.

Recommendations Update ThimPress Thim Core to a version later than 2.3.3.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2025-53344

Produtos afetados

Thimpress Thim Core

Referências · 7

• https://patchstack.com/database/Wordpress/Plugin/thim-core/vulnerability/wordpress-thim-core-plugin-plugin-2-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-53344 · Nota de Segurança
• https://twitter.com/CVEnew/status/2008220674792255902 · Publicação no Twitter
• https://t.me/CVEtracker/41400 · Publicação no Telegram
• https://patchstack.com/database/wordpress/plugin/thim-core/vulnerability/wordpress-thim-core-plugin-plugin-2-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Nota
• https://twitter.com/VulmonFeeds/status/2008292331481411892 · Publicação no Twitter
• https://vdp.patchstack.com/database/wordpress/plugin/thim-core/vulnerability/wordpress-thim-core-plugin-plugin-2-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Nota