Thim Core vulnerabilities

Missing authorization in the Thim Core plugin (versions up to 2.3.3) allows exploiting incorrectly configured access control security levels.

Missing authorization in ThimPress Thim Core allows code execution after installing a malicious vulnerable plugin. This affects versions up to 2.3.3.

The Thim Core plugin by ThimPress contains a Cross-Site Request Forgery vulnerability in versions from n/a through 2.3.3. This vulnerability allows an attacker to leverage CSRF to perform unauthorized actions in the context of a logged-in administrator.