Vulnerabilities in VibeThemes
31 resultsCVE-2024-56051HIGHWordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerabilityEPSS 0.5%CVE-2024-56053HIGHWordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerabilityEPSS 0.4%CVE-2025-32493MEDIUMWordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.4%CVE-2025-49925HIGHWordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-36690HIGHWordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-58668MEDIUMWordPress WPLMS theme <= 4.970 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-53420HIGHWordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-96327CRITICALWordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-39722HIGHWordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-63035MEDIUMWordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-95607HIGHWordPress WPLMS theme <= 4.973 - SQL Injection vulnerabilityEPSS 0.2%