Vendor

    VibeThemes

    34 known vulnerabilities in products by VibeThemes, 0 of them actively exploited (CISA KEV).

    Key figures

    34

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    15

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in VibeThemes
    CriticalCVE-2024-10470

    VibeThemes WPLMS: Path Traversal

    		9.8
    HighCVE-2015-10139

    WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation

    		8.8
    CriticalCVE-2023-2704

    BP Social Connect <= 1.5 - Authentication Bypass

    		9.8
    CriticalCVE-2024-56044

    WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability

    		9.8
    CriticalCVE-2024-56046

    WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability

    		10.0
    CriticalCVE-2024-56040

    WordPress VibeBP plugin <= 1.9.9.4.1 - Unauthenticated Privilege Escalation vulnerability

    		9.8
    CriticalCVE-2024-56050

    WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability

    		9.9
    CriticalCVE-2024-56052

    WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability

    		9.9
    CriticalCVE-2026-96327

    WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

    		9.3
    CriticalCVE-2024-56045

    WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability

    		9.3
    CriticalCVE-2024-56042

    WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability

    		9.3
    CriticalCVE-2024-56043

    WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability

    		9.8
    CriticalCVE-2024-56057

    WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability

    		9.9
    HighCVE-2026-16135

    VibeThemes VibeBP: Improper Privilege Management

    		8.8
    CriticalCVE-2024-56039

    WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability

    		9.3
    HighCVE-2025-69097

    WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability

    		8.6
    HighCVE-2026-95607

    WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

    		8.5
    CriticalCVE-2024-56054

    WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability

    		9.1
    HighCVE-2024-56048

    WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability

    		8.8
    HighCVE-2024-56047

    WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability

    		8.5
    HighCVE-2026-39722

    WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-56041

    WordPress VibeBP plugin < 1.9.9.5.1 - SQL Injection vulnerability

    		8.5
    HighCVE-2024-56055

    WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability

    		8.5
    HighCVE-2024-56049

    WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability

    		8.5
    HighCVE-2024-56051

    WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability

    		8.5

    All vulnerabilities in search

    Products

    Products by VibeThemes
    VibeThemes WPLMS240
    VibeThemes WPLMS220
    VibeThemes VibeBP40
    Bp Social Connect30