Description
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPFunnels | Creator LMS | ≤ 1.2.21 | — |
Critical · 9.9
CVE-2026-62129
EUVD-2026-96511GHSA-gj5p-w6rg-7h28
WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack