Skip to content
OpenAdvisories

Vendor

VibeThemes

32 known vulnerabilities.

Products

WPLMS 24 VibeBP 4 WPLMS Learning Management System for WordPress, WordPress LMS 2 BP Social Connect 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2015-10139 Public exploit

    WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation

    The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new…

    VibeThemes WPLMS Learning Management System for WordPress, WordPress LMS Web / CMS
  • Critical 9.8
    CVE-2024-10470 Public exploit EPSS 35%

    WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion

    The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and unlink functions in all versions up to,…

    VibeThemes WPLMS Learning Management System for WordPress, WordPress LMS Web / CMS