WP
Product
WPLMS
24
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 7High 16Medium 1Low 0
Watch
Add WPLMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-56047 | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability Affected: through 1.9.9.5.3 |
| CVE-2024-56053 | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability Affected: through 1.9.9.5.3 |
| CVE-2024-56048 | 8.8 | Dec 18 | WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability Affected: through 1.9.9 |
| CVE-2024-56050 | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability Affected: through 1.9.9.5.3 |
| CVE-2024-56052 | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability Affected: through 1.9.9.5.2 |
| CVE-2024-56054 | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability Affected: through 1.9.9.5.2 |
| CVE-2024-56057 | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability Affected: through 1.9.9.5.2 |
| CVE-2024-56055 | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability Affected: through 1.9.9.5.2 |
| CVE-2024-56051 | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability Affected: through 1.9.9.5 |
| CVE-2023-36690 | 8.8 | Jul 11 | WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF) Affected: before 4.900 |
| CVE-2025-69097 | 8.6 | Jan 22 | WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability Affected: through 1.9.9.5.4 |
| CVE-2026-95607 | 8.5 | Oct 9 | WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability Affected: through 4.973 |
| CVE-2024-56049 | 8.5 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability Affected: through 1.9.9.5.2 |
| CVE-2025-49925 | 7.5 | Oct 22 | WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability Affected: through 1.9.9.7 |
| CVE-2026-39722 | 7.1 | Oct 6 | WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 4.972 |
| CVE-2025-53420 | 7.1 | Oct 22 | WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability Affected: through 1.9.9.8 |
Showing 16