Log in Start free

VibeThemes

Products

ProductCVEsExploitedLatest
WPLMS24–Oct 9, 2026
VibeBP3–Dec 31, 2024
BP Social Connect2–Apr 9, 2025
WPLMS Learning Management System for WordPress, WordPress LMS1–Nov 9, 2024

Exploited and recent CVEs

  • CVE-2026-95607 High 8.5 WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability 0.2%
  • CVE-2026-96327 Critical 9.3 WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability 0.2%
  • CVE-2026-39722 High 7.1 WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69097 High 8.6 WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2025-63035 Medium 6.5 WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-53420 High 7.1 WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-49925 High 7.5 WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability 0.4%
  • CVE-2025-58668 Medium 4.3 WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability 0.3%
  • CVE-2025-32493 Medium 5.9 WordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability 0.4%
  • CVE-2024-56045 Critical 9.3 WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability 0.7%
  • CVE-2024-56044 Critical 9.8 WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability 0.8%
  • CVE-2024-56043 Critical 9.8 WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability 0.6%
  • CVE-2024-56040 Critical 9.8 WordPress VibeBP plugin <= 1.9.9.4.1 - Unauthenticated Privilege Escalation vulnerability 0.8%
  • CVE-2024-56042 Critical 9.3 WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability 0.7%
  • CVE-2024-56041 High 8.5 WordPress VibeBP plugin < 1.9.9.5.1 - SQL Injection vulnerability 0.5%
  • CVE-2024-56039 Critical 9.3 WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability 0.6%
  • CVE-2024-56046 Critical 10.0 WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability 0.8%
  • CVE-2024-56047 High 8.5 WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability 0.6%
  • CVE-2024-56053 High 7.6 WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability 0.4%
  • CVE-2024-56048 High 8.8 WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability 0.6%
  • CVE-2024-56050 Critical 9.9 WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability 0.7%
  • CVE-2024-56052 Critical 9.9 WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability 0.7%
  • CVE-2024-56054 Critical 9.1 WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability 0.6%
  • CVE-2024-56057 Critical 9.9 WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability 0.6%
  • CVE-2024-56049 High 8.5 WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability 0.5%
  • CVE-2024-56055 High 8.5 WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability 0.5%
  • CVE-2024-56051 High 8.5 WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability 0.5%
  • CVE-2024-10470 Critical 9.8 WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion 34.8%
  • CVE-2023-36690 High 8.1 WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-2704 Critical 9.8 BP Social Connect <= 1.5 - Authentication Bypass 1.6%