wordpress learning management system vulnerabilities and fixes

Recent CVEs affecting wordpress learning management system, with upgrade or downgrade steps. 18 tracked.

Also searched as: wordpresslearningmanagementsystem.

wordpress learning management system has 18 tracked vulnerabilities, 10 critical. A fixed release or vendor patch exists for 18. Most recent: 2025-12-09. Highest priority: CVE-2024-10470 (score 67/100).

• CVE-2025-58668 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access
• CVE-2025-63035 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThem
• CVE-2024-56057 CRITICAL 9.9 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a
• CVE-2024-56055 HIGH 8.5 UPGRADE Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue af
• CVE-2024-56054 CRITICAL 9.1 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a
• CVE-2024-56053 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThem
• CVE-2024-56052 CRITICAL 9.9 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a
• CVE-2024-56051 HIGH 8.5 UPGRADE Improper Control of Generation of Code ('Code Injection') vulnerability in VibeThemes WPLMS wplms_plugin allow
• CVE-2024-56050 CRITICAL 9.9 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a
• CVE-2024-56049 HIGH 8.5 UPGRADE Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue af
• CVE-2024-56048 HIGH 8.8 UPGRADE Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Proper
• CVE-2024-56047 HIGH 8.5 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThem
• CVE-2024-56046 CRITICAL 10.0 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a
• CVE-2024-56045 CRITICAL 9.3 UPGRADE Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue af
• CVE-2024-56044 CRITICAL 9.8 UPGRADE Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows
• CVE-2024-56043 CRITICAL 9.8 UPGRADE Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.This
• CVE-2024-56042 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThem
• CVE-2024-10470 CRITICAL 9.8 UPGRADE The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitra

FAQ

How do I fix wordpress learning management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wordpress learning management system being exploited right now?

None of the tracked wordpress learning management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which wordpress learning management system CVE should I patch first?

CVE-2024-10470 currently ranks highest (67/100): The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitra.

RSS feed for wordpress learning management system · ← Back to latest CVEs