Approved changes feed: RSS · Atom

cpe:2.3:a:vibethemes:wordpress_learning_management_system:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorVibethemes (19d9c24a-6a00-5f43-abb2-829fc6a19989)
ProductWordpress Learning Management System (1db6f616-3828-5568-93e2-4d0933841f78)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-63035 vulnerable 2026-06-08 07:39:17.202737 WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based XSS.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.
Published: 2025-12-09T14:52:29.953Z
Updated: 2026-04-28T19:34:27.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58668 vulnerable 2026-06-08 07:35:18.976677 WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970.
Published: 2025-09-22T18:22:56.277Z
Updated: 2026-05-13T00:23:23.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53420 vulnerable 2026-06-08 07:31:14.516679 WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8.
Published: 2025-10-22T14:32:32.282Z
Updated: 2026-04-28T19:13:29.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49925 vulnerable 2026-06-08 07:29:15.114922 WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability
HIGH (7.5)
Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7.
Published: 2025-10-22T14:32:14.033Z
Updated: 2026-04-28T16:13:07.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56057 vulnerable 2026-06-08 06:54:17.405792 WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability
CRITICAL (9.9)
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.
Published: 2024-12-18T18:52:17.015Z
Updated: 2026-05-12T23:42:03.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56055 vulnerable 2026-06-08 06:54:17.400621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56054 vulnerable 2026-06-08 06:54:17.400179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56053 vulnerable 2026-06-08 06:54:17.399848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56052 vulnerable 2026-06-08 06:54:17.399372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56051 vulnerable 2026-06-08 06:54:17.398946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56050 vulnerable 2026-06-08 06:54:17.398515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56049 vulnerable 2026-06-08 06:54:17.398121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56048 vulnerable 2026-06-08 06:54:17.397713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56047 vulnerable 2026-06-08 06:54:17.397280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56046 vulnerable 2026-06-08 06:54:17.396723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56045 vulnerable 2026-06-08 06:54:17.396331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56044 vulnerable 2026-06-08 06:54:17.396018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56043 vulnerable 2026-06-08 06:54:17.395588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56042 vulnerable 2026-06-08 06:54:17.395048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10470 vulnerable 2026-06-08 06:23:46.686946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36690 vulnerable 2026-06-08 06:08:12.884673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.