CVE-2026-1870 | thimpress Thim Kit for Elementor Plugin up to 1.3.7 on WordPress REST Endpoint get-courses post_status authorization

A vulnerability has been found in thimpress Thim Kit for Elementor Plugin up to 1.3.7 on WordPress and classified as problematic. Impacted is an unknown function of the file /thim-ekit/archive-course/get-courses of the component REST Endpoint. Performing a manipulation of the argument post_status results in missing authorization.

This vulnerability is identified as CVE-2026-1870. The attack can be initiated remotely. There is not any exploit available.