LMS vulnerabilities | LiveThreat CVE Feed

Product

LMS

by designthemes · last CVE Oct 10, 2026

CVEs

On KEV

9.3

Max CVSS

New 30D

Severity mix

Critical 1High 3Medium 0Low 0

Severity

Exploitation

Watch

Add LMS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-52833	9.3	0%	Jul 4	WordPress LMS theme <= 9.2 - SQL Injection Vulnerability Affected: through 9.2
CVE-2026-78532	7.1	0%	Oct 10	WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability Affected: through 8.3
CVE-2026-27404	7.1	0%	Jul 2	WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 9.7
CVE-2025-52799	7.1	0%	Jun 27	WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerability Affected: through 9.2