Skip to content
OpenAdvisories

Vendor

VibeThemes

32 known vulnerabilities.

Products

WPLMS 24 VibeBP 4 WPLMS Learning Management System for WordPress, WordPress LMS 2 BP Social Connect 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-63035

    WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based XSS.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.

    VibeThemes WPLMS
  • Medium 4.3
    CVE-2025-58668

    WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability

    Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970.

    VibeThemes WPLMS
  • Medium 5.9
    CVE-2025-32493

    WordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes BP Social Connect bp-social-connect allows Stored XSS.This issue affects BP Social Connect: from n/a through <= 1.6.2.

    VibeThemes BP Social Connect