VibeThemes WPLMS vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202415
3. 20254
4. 20264

Newest CVEs

• CVE-2026-95607

  WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

  VibeThemes · WPLMS

  High8.5
• CVE-2026-96327

  WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

  VibeThemes · WPLMS

  Critical9.3
• CVE-2026-39722

  WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability

  VibeThemes · WPLMS

  High7.1
• CVE-2025-69097

  WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability

  VibeThemes · WPLMS

  High8.6
• CVE-2025-63035

  WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability

  VibeThemes · WPLMS

  Medium6.5
• CVE-2025-53420

  WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability

  VibeThemes · WPLMS

  High7.1
• CVE-2025-49925

  WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability

  VibeThemes · WPLMS

  High7.5
• CVE-2025-58668

  WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability

  VibeThemes · WPLMS

  Medium4.3
• CVE-2024-56045

  WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability

  VibeThemes · WPLMS

  Critical9.3
• CVE-2024-56044

  WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability

  VibeThemes · WPLMS

  Critical9.8