VYPR
← Vibethemes

Vendor CVEs

Vibethemes

All CVEs

27 total · sorted by risk
  • CVE-2024-10470CriNov 9, 2024
    WordPress
    WPLMS Learning Management System
    risk 0.66cvss 9.8epss 0.34

    The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and unlink functions in all versions up to, and including,…

  • CVE-2024-56046CriDec 31, 2024
    WordPress
    WPLMS
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through <= 1.9.9.

  • CVE-2024-56044CriDec 31, 2024
    WordPress
    WPLMS
    risk 0.64cvss 9.8epss 0.01

    Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentication Bypass.This issue affects WPLMS: from n/a through <= 1.9.9.

  • CVE-2024-56043CriDec 31, 2024
    WordPress
    WPLMS
    risk 0.64cvss 9.8epss 0.01

    Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.This issue affects WPLMS: from n/a through <= 1.9.9.

  • CVE-2024-56057CriDec 18, 2024
    WordPress
    WPLMS
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.

  • CVE-2024-56052CriDec 18, 2024
    WordPress
    WPLMS
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.

  • CVE-2024-56050CriDec 18, 2024
    WordPress
    WPLMS
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.3.

  • CVE-2023-2704CriMay 19, 2023
    WordPress
    Bp Social Connect
    risk 0.64cvss 9.8epss 0.02

    The BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated…

  • CVE-2024-56045CriDec 31, 2024
    WordPress
    WPLMS
    risk 0.61cvss 9.3epss 0.01

    Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.

  • CVE-2024-56042CriDec 31, 2024
    WordPress
    WPLMS
    risk 0.61cvss 9.3epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3.

  • CVE-2015-10139HigJul 19, 2025
    WordPress
    WPLMS
    risk 0.60cvss 8.8epss 0.01

    The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin…

  • CVE-2024-56039CriDec 31, 2024
    Vibethemes
    VibeBP
    risk 0.60cvss 9.3epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.7.7.

  • CVE-2024-56054CriDec 18, 2024
    WordPress
    WPLMS
    risk 0.59cvss 9.1epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2.

  • CVE-2024-56048HigDec 18, 2024
    WordPress
    WPLMS
    risk 0.57cvss 8.8epss 0.01

    Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.

  • CVE-2024-56041HigDec 31, 2024
    Vibethemes
    VibeBP
    risk 0.55cvss 8.5epss 0.00

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.5.1.

  • CVE-2024-56055HigDec 18, 2024
    WordPress
    WPLMS
    risk 0.55cvss 8.5epss 0.00

    Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2.

  • CVE-2024-56051HigDec 18, 2024
    WordPress
    WPLMS
    risk 0.55cvss 8.5epss 0.00

    Improper Control of Generation of Code ('Code Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Code Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.

  • CVE-2024-56049HigDec 18, 2024
    WordPress
    WPLMS
    risk 0.55cvss 8.5epss 0.00

    Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2.

  • CVE-2024-56047HigDec 18, 2024
    WordPress
    WPLMS
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3.

  • CVE-2023-36690HigJul 11, 2023
    Vibethemes
    WPLMS
    risk 0.53cvss 8.1epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in VibeThemes WPLMS theme <= 4.900 versions.

  • CVE-2025-49925HigOct 22, 2025
    WordPress
    WPLMS
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7.

  • CVE-2024-56053HigDec 18, 2024
    WordPress
    WPLMS
    risk 0.49cvss 7.6epss 0.00

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3.

  • CVE-2025-53420HigOct 22, 2025
    Vibethemes
    WPLMS
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8.

  • CVE-2025-63035MedDec 9, 2025
    Vibethemes
    WPLMS
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based XSS.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.

  • CVE-2023-25797MedMay 3, 2023
    WordPress
    vSlider Multi Image Slider for WordPress
    risk 0.38cvss 5.9epss 0.00

    Auth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <= 4.1.2 versions.

  • CVE-2025-58668MedSep 22, 2025
    WordPress
    WPLMS
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970.

  • CVE-2023-22672MedJul 17, 2023
    WordPress
    vSlider Multi Image Slider for WordPress
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <= 4.1.2 versions.