Skip to content

Vibethemes vulnerabilities

Products

Newest

vibethemes wplms WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability CVE-2026-96327 9.3 CriticalOctober 9, 2026
vibethemes wplms WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability CVE-2026-95607 8.5 HighOctober 9, 2026
vibethemes wplms WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-39722 7.1 HighOctober 6, 2026
vibethemes wplms WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability CVE-2025-69097 8.6 HighJanuary 22, 2026
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-63035 6.5 MediumDecember 9, 2025
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-53420 7.1 HighOctober 22, 2025
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability CVE-2025-49925 7.5 HighOctober 22, 2025
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability CVE-2025-58668 4.3 MediumSeptember 22, 2025
vibethemes wplms learning management system for wordpress, wordpress lms, wordpress learning management system +1 more WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation CVE-2015-10139 8.8 HighJuly 19, 2025
vibethemes bp social connect WordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-32493 5.9 MediumApril 9, 2025
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability CVE-2024-56045 9.3 CriticalDecember 31, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability CVE-2024-56044 9.8 CriticalDecember 31, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability CVE-2024-56043 9.8 CriticalDecember 31, 2024
vibethemes vibebp WordPress VibeBP plugin <= 1.9.9.4.1 - Unauthenticated Privilege Escalation vulnerability CVE-2024-56040 9.8 CriticalDecember 31, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability CVE-2024-56042 9.3 CriticalDecember 31, 2024
vibethemes vibebp WordPress VibeBP plugin < 1.9.9.5.1 - SQL Injection vulnerability CVE-2024-56041 8.5 HighDecember 31, 2024
vibethemes vibebp WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability CVE-2024-56039 9.3 CriticalDecember 31, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability CVE-2024-56046 10.0 CriticalDecember 31, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability CVE-2024-56047 8.5 HighDecember 18, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability CVE-2024-56053 7.6 HighDecember 18, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability CVE-2024-56048 8.8 HighDecember 18, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability CVE-2024-56050 9.9 CriticalDecember 18, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability CVE-2024-56052 9.9 CriticalDecember 18, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability CVE-2024-56054 9.1 CriticalDecember 18, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability CVE-2024-56057 9.9 CriticalDecember 18, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability CVE-2024-56049 8.5 HighDecember 18, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability CVE-2024-56055 8.5 HighDecember 18, 2024
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability CVE-2024-56051 8.5 HighDecember 18, 2024
vibethemes wplms learning management system for wordpress, wordpress lms, wordpress learning management system, wordpress learning management system +2 more WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion CVE-2024-10470 Public exploit EPSS 34.8% 9.8 CriticalNovember 9, 2024
mr.vibe vslider multi image slider for wordpress, vibethemes vslider +1 more WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-22672 4.3 MediumJuly 17, 2023
vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-36690 8.1 HighJuly 11, 2023
vibethemes bp social connect BP Social Connect <= 1.5 - Authentication Bypass CVE-2023-2704 9.8 CriticalMay 19, 2023
mr.vibe vslider multi image slider for wordpress, vibethemes vslider +1 more WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25797 5.9 MediumMay 3, 2023