VibeThemes WPLMS

• CVE-2026-95607 High 8.5 WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability 0.2%
• CVE-2026-96327 Critical 9.3 WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability 0.2%
• CVE-2026-39722 High 7.1 WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-69097 High 8.6 WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability 0.5%
• CVE-2025-63035 Medium 6.5 WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-53420 High 7.1 WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-49925 High 7.5 WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability 0.4%
• CVE-2025-58668 Medium 4.3 WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability 0.3%
• CVE-2024-56045 Critical 9.3 WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability 0.7%
• CVE-2024-56044 Critical 9.8 WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability 0.8%
• CVE-2024-56043 Critical 9.8 WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability 0.6%
• CVE-2024-56042 Critical 9.3 WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability 0.7%
• CVE-2024-56046 Critical 10.0 WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability 0.8%
• CVE-2024-56047 High 8.5 WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability 0.6%
• CVE-2024-56053 High 7.6 WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability 0.4%
• CVE-2024-56048 High 8.8 WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability 0.6%
• CVE-2024-56050 Critical 9.9 WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability 0.7%
• CVE-2024-56052 Critical 9.9 WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability 0.7%
• CVE-2024-56054 Critical 9.1 WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability 0.6%
• CVE-2024-56057 Critical 9.9 WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability 0.6%
• CVE-2024-56049 High 8.5 WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability 0.5%
• CVE-2024-56055 High 8.5 WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability 0.5%
• CVE-2024-56051 High 8.5 WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability 0.5%
• CVE-2023-36690 High 8.1 WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%