CVE Intelligence

Vulnerabilidades do Vibethemes Wordpress Learning Management System

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Vibethemes Wordpress Learning Management System: 4 registro(s), com versões afetadas e correções.
cpe:2.3:a:vibethemes:wordpress_learning_management_system

CVE-2025-63035 Média · 6.5 CWE-79 09/12/2025
WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based XSS.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.
CVE-2025-53420 Alta · 7.1 CWE-79 22/10/2025
WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8.
CVE-2025-49925 Alta · 7.5 CWE-862 22/10/2025
Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing...
Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7.
CVE-2025-58668 Crítica · 9.8 CWE-862 22/09/2025
WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability
Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970.