Vibethemes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Vibethemes products: 8 record(s), with severity, exploitation and fixes.

WPLMS 8 Wordpress Learning Management System 4

Exploited only (KEV) →

CVE-2026-96327 Critical · 9.3 CWE-89 Oct 9, 2026

WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2.

CVE-2026-95607 High · 8.5 CWE-89 Oct 9, 2026

WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973.

CVE-2026-39722 High · 7.1 CWE-79 Oct 6, 2026

WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.

CVE-2025-69097 High · 8.6 CWE-22 Jan 22, 2026

WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.

CVE-2025-63035 Medium · 6.5 CWE-79 Dec 9, 2025

WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based XSS.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.

CVE-2025-53420 High · 7.1 CWE-79 Oct 22, 2025

WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8.

CVE-2025-49925 High · 7.5 CWE-862 Oct 22, 2025

Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing...

Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7.

CVE-2025-58668 Critical · 9.8 CWE-862 Sep 22, 2025

WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability

Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970.