All products

wplms

WordPress · Theme
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WPLMS Learning Management System for WordPress, WordPress LMS <= 4.973 - Authenticated (Subscriber+) SQL InjectionCVE-2026-95607 wplms WordPress Medium Fix reported
WPLMS Learning Management System for WordPress, WordPress LMS <= 4.972 - Reflected Cross-Site ScriptingCVE-2026-39722 wplms WordPress Medium No fix reported
WPLMS <= 4.970 - Missing AuthorizationCVE-2025-58668 wplms WordPress Medium Fix reported
WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege EscalationCVE-2015-10139 wplms WordPress High Fix reported
WPLMS <= 1.9.9 - Unauthenticated Privilege EscalationCVE-2024-56043 wplms WordPress Critical Fix reported
WPLMS <= 1.9.9 - Missing Authorization to Unauthenticated User Token GenerationCVE-2024-56044 wplms WordPress Medium Fix reported
WPLMS < 1.9.9.5 - Unauthenticated Arbitrary Directory DeletionCVE-2024-56045 wplms WordPress High Fix reported
WPLMS <= 1.9.9 - Unauthenticated Arbitrary File UploadCVE-2024-56046 wplms WordPress Critical Fix reported
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) SQL InjectionCVE-2024-56047 wplms WordPress Medium Fix reported
WPLMS <= 1.9.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options UpdateCVE-2024-56048 wplms WordPress High Fix reported
WPLMS < 1.9.9.5.2 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2024-56049 wplms WordPress High Fix reported
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-56050 wplms WordPress High Fix reported
WPLMS < 1.9.9.5.2 - Authenticated (Student+) Arbitrary File UploadCVE-2024-56052 wplms WordPress High Fix reported
WPLMS < 1.9.9.5.2 - Authenticated (Instructor+) Arbitrary File UploadCVE-2024-56054 wplms WordPress High Fix reported
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary Directory DeletionCVE-2024-56055 wplms WordPress High Fix reported
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary File UploadCVE-2024-56057 wplms WordPress High Fix reported
WPLMS < 1.9.9.5 - Authenticated (Student+) Remote Code ExecutionCVE-2024-56051 wplms WordPress High Fix reported
WPLMS < 1.9.9.5.3 - Authenticated (Instructor+) SQL InjectionCVE-2024-56053 wplms WordPress Medium Fix reported
WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and DeletionCVE-2024-10470 wplms WordPress Critical Fix reported
WPLMS < 4.900 - Cross-Site Request ForgeryCVE-2023-36690 wplms WordPress Medium Fix reported