Vibethemes vulnerabilities
31 CVEs and advisories name Vibethemes as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-95607WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability
- CVE-2026-96327WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability
- CVE-2026-39722WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-69097WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability
- CVE-2025-63035WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-53420WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-49925WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability
- CVE-2025-58668WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability
- CVE-2015-10139WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation
- CVE-2025-32493WordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability
- CVE-2024-56045WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability
- CVE-2024-56044WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability
- CVE-2024-56043WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability
- CVE-2024-56040WordPress VibeBP plugin <= 1.9.9.4.1 - Unauthenticated Privilege Escalation vulnerability
- CVE-2024-56042WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability
- CVE-2024-56041WordPress VibeBP plugin < 1.9.9.5.1 - SQL Injection vulnerability
- CVE-2024-56039WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability
- CVE-2024-56046WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability
- CVE-2024-56047WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability
- CVE-2024-56053WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability
- CVE-2024-56048WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability
- CVE-2024-56050WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability
- CVE-2024-56052WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability
- CVE-2024-56054WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability
- CVE-2024-56057WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability
- CVE-2024-56049WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability
- CVE-2024-56055WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability
- CVE-2024-56051WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability
- CVE-2024-10470WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion
- CVE-2023-36690WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)