Wplms Learning Management System For Wordpress, Wordpress Lms
Approved changes feed: RSS · Atom
cpe:2.3:a:vibethemes:wplms_learning_management_system_for_wordpress,_wordpress_lms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Vibethemes (19d9c24a-6a00-5f43-abb2-829fc6a19989) |
|---|---|
| Product | Wplms Learning Management System For Wordpress, Wordpress Lms (803c4649-e797-5d42-8ffa-ad3af2ce7e9d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-10470 |
vulnerable | 2026-06-08 06:23:46.685170 |
WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion
CRITICAL (9.8)
The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and unlink functions in all versions up to, and including, 4.962. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The theme is vulnerable even when it is not activated.
Published: 2024-11-09T05:40:22.357Z
Updated: 2026-04-08T16:37:48.167Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-10139 |
vulnerable | 2026-06-08 05:06:24.762246 |
WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation
HIGH (8.8)
The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account.
Published: 2025-07-19T11:23:36.517Z
Updated: 2026-04-08T16:59:36.412Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.