VYPR

Fox LMS

by WordPress

CVEs (1)

  • CVE-2025-14156CriDec 15, 2025
    risk 0.64cvss 9.8epss 0.00

    The Fox LMS – WordPress LMS Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.5.1. This is due to the plugin not properly validating the 'role' parameter when creating new users via the…