VibeThemes WPLMS vulnerabilities
24 published CVEs name VibeThemes WPLMS among the affected products.
- 24Published CVEs24 of them scored
- 5Last 12 monthspublished in the last year
- 10Critical12 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-95607
WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability
VibeThemes · WPLMS
High8.5 - CVE-2026-96327
WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability
VibeThemes · WPLMS
Critical9.3 - CVE-2026-39722
WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability
VibeThemes · WPLMS
High7.1 - CVE-2025-69097
WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability
VibeThemes · WPLMS
High8.6 - CVE-2025-63035
WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability
VibeThemes · WPLMS
Medium6.5 - CVE-2025-53420
WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability
VibeThemes · WPLMS
High7.1 - CVE-2025-49925
WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability
VibeThemes · WPLMS
High7.5 - CVE-2025-58668
WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability
VibeThemes · WPLMS
Medium4.3 - CVE-2024-56045
WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability
VibeThemes · WPLMS
Critical9.3 - CVE-2024-56044
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability
VibeThemes · WPLMS
Critical9.8