Vibethemes Wordpress Learning Management System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Vibethemes Wordpress Learning Management System: 4 record(s), with affected versions and fixes.
cpe:2.3:a:vibethemes:wordpress_learning_management_system

CVE-2025-63035 Medium · 6.5 CWE-79 Dec 9, 2025

WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based XSS.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.

CVE-2025-53420 High · 7.1 CWE-79 Oct 22, 2025

WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8.

CVE-2025-49925 High · 7.5 CWE-862 Oct 22, 2025

Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing...

Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7.

CVE-2025-58668 Critical · 9.8 CWE-862 Sep 22, 2025

WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability

Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970.