VI
Vendor
VibeThemes
55
CVEs
0
On KEV
3
New 30D
Products
WP9.8
WPLMS
VibeThemes
24 CVEs0 on KEV3 new
WL9.8
Wordpress Learning Management System
Vibethemes
22 CVEs0 on KEV0 new
VI9.8
VibeBP
VibeThemes
3 CVEs0 on KEV0 new
BS9.8
BP Social Connect
vibethemes
2 CVEs0 on KEV0 new
VS8.8
Vslider
Vibethemes
2 CVEs0 on KEV0 new
WL9.8
WPLMS Learning Management System for WordPress, WordPress LMS
VibeThemes
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-95607 | WP WPLMS VibeThemes | 8.5 | Oct 9 | WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability |
| CVE-2026-96327 | WP WPLMS VibeThemes | 9.3 | Oct 9 | WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability |
| CVE-2026-39722 | WP WPLMS VibeThemes | 7.1 | Oct 6 | WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69097 | WP WPLMS VibeThemes | 8.6 | Jan 22 | WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability |
| CVE-2025-63035 | WP WPLMS VibeThemes | 6.5 | Dec 9 | WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-53420 | WP WPLMS VibeThemes | 7.1 | Oct 22 | WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49925 | WP WPLMS VibeThemes | 7.5 | Oct 22 | WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability |
| CVE-2025-58668 | WP WPLMS VibeThemes | 9.8 | Sep 22 | WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability |
| CVE-2015-10139 | WL WPLMS Learning Management System for WordPress, WordPress LMS VibeThemes | 8.8 | Jul 19 | WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation |
| CVE-2025-32493 | BS BP Social Connect VibeThemes | 5.9 | Apr 9 | WordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2024-56045 | WP WPLMS VibeThemes | 9.3 | Dec 31 | WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability |
| CVE-2024-56044 | WP WPLMS VibeThemes | 9.8 | Dec 31 | WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability |
| CVE-2024-56043 | WP WPLMS VibeThemes | 9.8 | Dec 31 | WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability |
| CVE-2024-56040 | VI VibeBP VibeThemes | 9.8 | Dec 31 | WordPress VibeBP plugin <= 1.9.9.4.1 - Unauthenticated Privilege Escalation vulnerability |
| CVE-2024-56042 | WP WPLMS VibeThemes | 9.8 | Dec 31 | WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability |
| CVE-2024-56041 | VI VibeBP VibeThemes | 8.5 | Dec 31 | WordPress VibeBP plugin < 1.9.9.5.1 - SQL Injection vulnerability |
| CVE-2024-56039 | VI VibeBP VibeThemes | 9.3 | Dec 31 | WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability |
| CVE-2024-56046 | WP WPLMS VibeThemes | 9.8 | Dec 31 | WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability |
| CVE-2024-56047 | WP WPLMS VibeThemes | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability |
| CVE-2024-56053 | WP WPLMS VibeThemes | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability |
| CVE-2024-56048 | WP WPLMS VibeThemes | 8.8 | Dec 18 | WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability |
| CVE-2024-56050 | WP WPLMS VibeThemes | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability |
| CVE-2024-56052 | WP WPLMS VibeThemes | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability |
| CVE-2024-56054 | WP WPLMS VibeThemes | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability |
| CVE-2024-56057 | WP WPLMS VibeThemes | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability |
| CVE-2024-56049 | WP WPLMS VibeThemes | 8.5 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability |
| CVE-2024-56055 | WP WPLMS VibeThemes | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability |
| CVE-2024-56051 | WP WPLMS VibeThemes | 8.8 | Dec 18 | WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability |
| CVE-2024-10470 | WL WPLMS Learning Management System for WordPress, WordPress LMS VibeThemes | 9.8 | Nov 9 | WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion |
| CVE-2023-22672 | VS Vslider Vibethemes | 8.8 | Jul 17 | WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-36690 | WP WPLMS VibeThemes | 8.8 | Jul 11 | WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-2704 | BS BP Social Connect vibethemes | 9.8 | May 19 | BP Social Connect <= 1.5 - Authentication Bypass |
| CVE-2023-25797 | VS Vslider Vibethemes | 4.8 | May 3 | WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS) |