VendorsVibeThemeswordpress_learning_management_systemany version
Vulnerabilities

VibeThemes WordPress Learning Management System (WPLMS) any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

21CVEs
CVE-2024-56046
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability
Published 2024-12-31 · Modified
10.0EPSS 0.008
CVE-2024-56052
WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability
Published 2024-12-18 · Modified
9.9EPSS 0.007
CVE-2024-56050
WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability
Published 2024-12-18 · Modified
9.9EPSS 0.007
CVE-2024-56057
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability
Published 2024-12-18 · Modified
9.9EPSS 0.006
CVE-2024-10470
WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion
Published 2024-11-09 · Analyzed
9.8EPSS 0.348
CVE-2024-56044
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability
Published 2024-12-31 · Modified
9.8EPSS 0.008
CVE-2024-56042
WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability
Published 2024-12-31 · Modified
9.8EPSS 0.007
CVE-2024-56043
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability
Published 2024-12-31 · Modified
9.8EPSS 0.006
CVE-2025-58668
WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability
Published 2025-09-22 · Modified
9.8EPSS 0.003
CVE-2024-56045
WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability
Published 2024-12-31 · Modified
9.3EPSS 0.007
CVE-2024-56054
WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability
Published 2024-12-18 · Modified
9.1EPSS 0.006
CVE-2024-56047
WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability
Published 2024-12-18 · Modified
8.8EPSS 0.006
CVE-2024-56048
WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability
Published 2024-12-18 · Modified
8.8EPSS 0.006
CVE-2024-56055
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability
Published 2024-12-18 · Modified
8.8EPSS 0.005
CVE-2024-56051
WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability
Published 2024-12-18 · Modified
8.8EPSS 0.005
CVE-2024-56053
WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability
Published 2024-12-18 · Modified
8.8EPSS 0.004
CVE-2023-36690
WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-07-11 · Analyzed
8.8EPSS 0.003
CVE-2024-56049
WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability
Published 2024-12-18 · Modified
8.5EPSS 0.005
CVE-2025-49925
WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability
Published 2025-10-22 · Modified
7.5EPSS 0.004
CVE-2025-53420
WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability
Published 2025-10-22 · Modified
7.1EPSS 0.003
CVE-2025-63035
WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability
Published 2025-12-09 · Modified
6.5EPSS 0.002