Advisories · Technology
VibeThemes WPLMS.
Every CVE that names VibeThemes WPLMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability
- VibeThemes WPLMS
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability
- VibeThemes WPLMS
- SQL injection
- CVSS 7.1 High
WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability
- VibeThemes WPLMS
- Cross-site scripting (XSS)
- CVSS 8.6 High
WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability
- VibeThemes WPLMS
- Path traversal
- CVSS 6.5 Medium
WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability
- VibeThemes WPLMS
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability
- VibeThemes WPLMS
- Cross-site scripting (XSS)
- CVSS 7.5 High
WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability
- VibeThemes WPLMS
- Broken access control
- CVSS 4.3 Medium
WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability
- VibeThemes WPLMS
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability
- VibeThemes WPLMS
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability
- VibeThemes WPLMS
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability
- VibeThemes WPLMS
- Privilege escalation
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability
- VibeThemes WPLMS
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability
- VibeThemes WPLMS
- Unrestricted file upload
- CVSS 8.5 High
WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability
- VibeThemes WPLMS
- SQL injection
- CVSS 7.6 High
WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability
- VibeThemes WPLMS
- SQL injection
- CVSS 8.8 High
WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability
- VibeThemes WPLMS
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability
- VibeThemes WPLMS
- Unrestricted file upload
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability
- VibeThemes WPLMS
- Unrestricted file upload
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability
- VibeThemes WPLMS
- Unrestricted file upload
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability
- VibeThemes WPLMS
- Unrestricted file upload
- CVSS 8.5 High
WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability
- VibeThemes WPLMS
- Path traversal
- CVSS 8.5 High
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability
- VibeThemes WPLMS
- Path traversal
- CVSS 8.5 High
WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability
- VibeThemes WPLMS
- Code injection
- CVSS 8.1 High
WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)
- VibeThemes WPLMS
- Cross-site request forgery (CSRF)