Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 5:3 p.m.1 views

CVE-2026-32530

Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through = 1.1.18...

8.8CVSS5.8AI score0.00058EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:15 p.m.1 views

CVE-2026-32530 WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through = 1.1.18...

5.8AI score0.00058EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/25 4:15 p.m.0 views

CVE-2026-32530

Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through = 1.1.18...

5.8AI score0.00058EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

WordPress plugin Creator LMS 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.8CVSS5.8AI score0.00058EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/20 3:19 p.m.3 views

WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Creator LMS versions = 1.1.18...

8.8CVSS5.8AI score0.00058EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/01/20 10:52 p.m.9 views

WordPress Creator LMS - The LMS for Creators, Coaches, and Trainers plugin <= 1.1.12 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update vulnerability

WordPress Creator LMS - The LMS for Creators, Coaches, and Trainers plugin = 1.1.12 - Missing Authorization to Authenticated Contributor+ Arbitrary Options Update vulnerability discovered by Sarawut Poolkhet MisterHelloz in WordPress Plugin Creator LMS versions = 1.1.12...

8.8CVSS5.5AI score0.00062EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/01/20 3:16 p.m.2 views

CVE-2025-15347

The Creator LMS – The LMS for Creators, Coaches, and Trainers plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in the getitemspermissionscheck function in all versions up to, and including, 1.1.12. This...

8.8CVSS0.00062EPSS
Exploits0References2
CVE
CVE
added 2026/01/20 2:26 p.m.8 views

CVE-2025-15347

The Creator LMS WordPress plugin (

8.8CVSS5.7AI score0.00062EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/20 2:26 p.m.2 views

CVE-2025-15347

The Creator LMS – The LMS for Creators, Coaches, and Trainers plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in the getitemspermissionscheck function in all versions up to, and including, 1.1.12. This...

8.8CVSS5.5AI score0.00062EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/20 2:26 p.m.3 views

CVE-2025-15347 Creator LMS – The LMS for Creators, Coaches, and Trainers <= 1.1.12 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update

The Creator LMS – The LMS for Creators, Coaches, and Trainers plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in the getitemspermissionscheck function in all versions up to, and including, 1.1.12. This...

8.8CVSS5.7AI score0.00062EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/20 2:26 p.m.18 views

CVE-2025-15347 Creator LMS – The LMS for Creators, Coaches, and Trainers <= 1.1.12 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update

The Creator LMS – The LMS for Creators, Coaches, and Trainers plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in the getitemspermissionscheck function in all versions up to, and including, 1.1.12. This...

8.8CVSS0.00062EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.5 views

PT-2026-3572

The Creator LMS – The LMS for Creators, Coaches, and Trainers plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in the get items permissions check function in all versions up to, and including, 1.1.12...

8.8CVSS5.7AI score0.00062EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/10 3:16 p.m.7 views

WordPress Creator LMS plugin <= 1.1.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by NumeX in WordPress Plugin Creator LMS versions = 1.1.12...

5.3CVSS6.9AI score0.00077EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/08 3:15 a.m.2 views

CVE-2025-69359

Missing Authorization vulnerability in WPFunnels Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through = 1.1.12...

5.3CVSS7AI score0.00077EPSS
Exploits0References1
NVD
NVD
added 2026/01/06 5:15 p.m.3 views

CVE-2025-69359

Missing Authorization vulnerability in WPFunnels Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through = 1.1.12...

5.3CVSS0.00077EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/06 4:36 p.m.2 views

CVE-2025-69359 WordPress Creator LMS plugin <= 1.1.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPFunnels Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through = 1.1.12...

5.3CVSS6.6AI score0.00077EPSS
Exploits0References1
CVE
CVE
added 2026/01/06 4:36 p.m.6 views

CVE-2025-69359

The CVE-2025-69359 entry concerns a Missing Authorization vulnerability in Creator LMS (Creator LMS – The LMS for Creators, Coaches, and Trainers). The connected Wordfence report confirms this issue exists in Creator LMS versions from inception up to and including 1.1.12 and describes it as an ac...

5.3CVSS6.6AI score0.00077EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.5 views

PT-2026-1486

Name of the Vulnerable Software and Affected Versions WPFunnels Creator LMS versions through 1.1.12 Description An authorization issue exists in WPFunnels Creator LMS. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendatio...

6.5AI score0.00077EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.2 views

WordPress plugin Creator LMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.4AI score0.00077EPSS
Exploits0References1
Rows per page
Query Builder