What’s Vulnerable › Products
VibeThemes Wordpress Learning Management System vulnerabilities
21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.
Check whether your VibeThemes Wordpress Learning Management System version is affected
Latest VibeThemes Wordpress Learning Management System vulnerabilities
- CVE-2025-63035 — WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-53420 — WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2025-49925 — WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability (CVSS 7.5)
- CVE-2025-58668 — WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability (CVSS 9.8)
- CVE-2024-56045 — WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability (CVSS 9.3)
- CVE-2024-56044 — WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability (CVSS 9.8)
- CVE-2024-56043 — WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability (CVSS 9.8)
- CVE-2024-56046 — WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability (CVSS 9.8)
- CVE-2024-56042 — WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability (CVSS 9.8)
- CVE-2024-56057 — WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability (CVSS 8.8)
- CVE-2024-56055 — WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability (CVSS 8.8)
- CVE-2024-56054 — WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability (CVSS 8.8)
- CVE-2024-56053 — WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability (CVSS 8.8)
- CVE-2024-56052 — WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability (CVSS 8.8)
- CVE-2024-56051 — WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability (CVSS 8.8)
- CVE-2024-56050 — WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability (CVSS 8.8)
- CVE-2024-56049 — WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability (CVSS 8.5)
- CVE-2024-56048 — WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability (CVSS 8.8)
- CVE-2024-56047 — WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability (CVSS 8.8)
- CVE-2024-10470 — WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion (CVSS 9.8)
- CVE-2023-36690 — WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)