← Back

Wordpress Learning Management System

wordpress_learning_management_system

Vendor: Vibethemes • 21 CVEs

CVEs (21)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-63035
1Vibethemes
1Wordpress Learning Management System
Jan 30, 2026
Dec 9, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based XSS.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.
CVE-2025-53420
1Vibethemes
1Wordpress Learning Management System
Jan 20, 2026
Oct 22, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8.
CVE-2025-49925
1Vibethemes
1Wordpress Learning Management System
Apr 27, 2026
Oct 22, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7.
CVE-2025-58668
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Sep 22, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970.
CVE-2024-56045
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 31, 2024
N/A· v4
9.3 CRITICAL· v3
N/A· v2
Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.
CVE-2024-56044
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 31, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentication Bypass.This issue affects WPLMS: from n/a through <= 1.9.9.
CVE-2024-56043
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 31, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.This issue affects WPLMS: from n/a through <= 1.9.9.
CVE-2024-56046
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 31, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through <= 1.9.9.
CVE-2024-56042
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 31, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3.
CVE-2024-56057
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56055
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56054
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56053
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3.
CVE-2024-56052
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56051
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper Control of Generation of Code ('Code Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Code Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.
CVE-2024-56050
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.3.
CVE-2024-56049
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.5 HIGH· v3
N/A· v2
Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
CVE-2024-56048
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.
CVE-2024-56047
1Vibethemes
1Wordpress Learning Management System
Apr 23, 2026
Dec 18, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3.
CVE-2024-10470
1Vibethemes
1Wordpress Learning Management System
Dec 23, 2025
Nov 9, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and...Show more
The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and unlink functions in all versions up to, and including, 4.962. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The theme is vulnerable even when it is not activated.Show less