Product by VibeThemes

    VibeThemes WPLMS

    24 known vulnerabilities in VibeThemes WPLMS (VibeThemes), 0 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    11

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in VibeThemes WPLMS (VibeThemes)
    CriticalCVE-2024-56044

    WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2024-56046

    WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability

    also in 1 other product

    		10.0
    CriticalCVE-2024-56050

    WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability

    also in 1 other product

    		9.9
    CriticalCVE-2024-56052

    WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability

    also in 1 other product

    		9.9
    CriticalCVE-2026-96327

    WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

    		9.3
    CriticalCVE-2024-56045

    WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability

    also in 1 other product

    		9.3
    CriticalCVE-2024-56042

    WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability

    also in 1 other product

    		9.3
    CriticalCVE-2024-56043

    WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2024-56057

    WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability

    also in 1 other product

    		9.9
    HighCVE-2025-69097

    WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability

    		8.6
    HighCVE-2026-95607

    WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

    		8.5
    CriticalCVE-2024-56054

    WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability

    also in 1 other product

    		9.1
    HighCVE-2024-56048

    WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability

    also in 1 other product

    		8.8
    HighCVE-2024-56047

    WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability

    also in 1 other product

    		8.5
    HighCVE-2026-39722

    WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-56055

    WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability

    also in 1 other product

    		8.5
    HighCVE-2024-56049

    WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability

    also in 1 other product

    		8.5
    HighCVE-2024-56051

    WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability

    also in 1 other product

    		8.5
    HighCVE-2024-56053

    WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability

    also in 1 other product

    		7.6
    HighCVE-2025-49925

    WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability

    also in 1 other product

    		7.5
    HighCVE-2025-53420

    WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    HighCVE-2023-36690

    WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)

    also in 1 other product

    		8.1
    MediumCVE-2025-63035

    WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    CriticalCVE-2025-58668

    WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability

    also in 1 other product

    		4.3

    All products by VibeThemes