Vulnerability index

Browse CVEs

24 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wordpress Learning Management System MEDIUM 6.5
CVE-2025-63035

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based …

Fix: after 1.9.9.5.4
Fix from $1,600 2025-12-09
Wordpress Learning Management System HIGH 7.1
CVE-2025-53420

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected …

Fix: after 1.9.9.8
Fix from $1,950 2025-10-22
Wordpress Learning Management System HIGH 7.5
CVE-2025-49925

Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affec…

Fix: 1.9.9.8+
Fix from $1,950 2025-10-22
Wordpress Learning Management System CRITICAL 9.8
CVE-2025-58668

Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…

Fix: 4.971+
Fix from $2,300 2025-09-22
Wordpress Learning Management System HIGH 8.8
CVE-2015-10139

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This make…

Fix: 1.8.9+
Fix from $1,950 2025-07-19
Wordpress Learning Management System CRITICAL 9.8
CVE-2024-56043

Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.This issue affects WPLMS: from n/a through …

Fix: 1.9.9.1+
Fix from $2,300 2024-12-31
Wordpress Learning Management System CRITICAL 9.8
CVE-2024-56044

Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentication Bypass.This issue affec…

Fix: 1.9.9.1+
Fix from $2,300 2024-12-31
Wordpress Learning Management System CRITICAL 9.3
CVE-2024-56045

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.

Fix: 1.9.9.5+
Fix from $2,300 2024-12-31
Wordpress Learning Management System CRITICAL 9.8
CVE-2024-56042

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Inject…

Fix: 1.9.9.5.3+
Fix from $2,300 2024-12-31
Wordpress Learning Management System CRITICAL 9.8
CVE-2024-56046

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue a…

Fix: 1.9.9.1+
Fix from $2,300 2024-12-31
Wordpress Learning Management System HIGH 8.8
CVE-2024-56053

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Inject…

Fix: 1.9.9.5.3+
Fix from $1,950 2024-12-18
Wordpress Learning Management System HIGH 8.8
CVE-2024-56054

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue a…

Fix: 1.9.9.5.2+
Fix from $1,950 2024-12-18
Wordpress Learning Management System HIGH 8.8
CVE-2024-56055

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5…

Fix: 1.9.9.5.2+
Fix from $1,950 2024-12-18
Wordpress Learning Management System HIGH 8.8
CVE-2024-56057

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue a…

Fix: 1.9.9.5.2+
Fix from $1,950 2024-12-18
Wordpress Learning Management System HIGH 8.8
CVE-2024-56047

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Inject…

Fix: 1.9.9.5.3+
Fix from $1,950 2024-12-18
Wordpress Learning Management System HIGH 8.8
CVE-2024-56048

Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affec…

Fix: 1.9.9.1+
Fix from $1,950 2024-12-18
Wordpress Learning Management System HIGH 8.8
CVE-2024-56050

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue a…

Fix: 1.9.9.5.3+
Fix from $1,950 2024-12-18
Wordpress Learning Management System HIGH 8.8
CVE-2024-56051

Improper Control of Generation of Code ('Code Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Code Injection.This issue affects WPL…

Fix: 1.9.9.5+
Fix from $1,950 2024-12-18
Wordpress Learning Management System HIGH 8.8
CVE-2024-56052

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue a…

Fix: 1.9.9.5.2+
Fix from $1,950 2024-12-18
Wordpress Learning Management System HIGH 8.5
CVE-2024-56049

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5…

Fix: 1.9.9.5.2+
Fix from $1,950 2024-12-18
Wordpress Learning Management System CRITICAL 9.8
CVE-2024-10470EPSS 34%

The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insuff…

Fix: 4.963+
Fix from $2,300 2024-11-09
Vslider HIGH 8.8
CVE-2023-22672

Cross-Site Request Forgery (CSRF) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <= 4.1.2 versions.

Fix: after 4.1.2
Fix from $1,950 2023-07-17
Wordpress Learning Management System HIGH 8.8
CVE-2023-36690

Cross-Site Request Forgery (CSRF) vulnerability in VibeThemes WPLMS theme <= 4.900 versions.

Fix: after 4.900
Fix from $1,950 2023-07-11
Bp Social Connect CRITICAL 9.8
CVE-2023-2704

The BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5. This is due to insufficient …

Fix: after 1.5
Fix from $2,300 2023-05-19