237 matches found
CVE-2024-10470
CVE-2024-10470 WPLMS वर्डप्रेस के लिए लर्निंग मैनेजमेंट सिस्टम = 4.962 – बिना प्रमाणीकरण के मनमानी फ़ाइल पढ़ना और हटाना विवरण WPLMS वर्डप्रेस के लिए लर्निंग मैनेजमेंट सिस्टम, वर्डप्रेस LMS थीम, सभी संस्करणों में 4.962 तक, readfile और unlink फ़ंक्शन में अपर्याप्त फ़ाइल पथ सत्यापन और अनुमति जाँच के...
CVE-2026-96327
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...
CVE-2026-95607
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...
EUVD-2026-95599
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...
EUVD-2026-95598
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...
CVE-2026-95607 WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...
CVE-2026-96327 WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...
CVE-2026-96327
The VibeThemes WPLMS wplms_plugin for WordPress is vulnerable to Blind SQL Injection due to the improper neutralization of special elements used in SQL commands. This security flaw affects versions prior to 1.9.9.8.2 . Exploitation could lead to unauthorized access to the underlying database. No ...
CVE-2026-95607
The VibeThemes WPLMS WordPress theme (versions up to and including 4.973 ) is vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. The attack vector is network-based with low complexity , requiring low pr...
PT-2026-108844
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...
PT-2026-108848
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...
CVE-2026-39722
Unauthenticated Cross Site Scripting XSS in WPLMS = 4.972 versions...
EUVD-2026-93245
Unauthenticated Cross Site Scripting XSS in WPLMS = 4.972 versions...
CVE-2026-39722
The WPLMS WordPress theme, specifically versions
CVE-2026-39722 WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WPLMS = 4.972 versions...
CVE-2026-39722 WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WPLMS = 4.972 versions...
PT-2026-106410
Unauthenticated Cross Site Scripting XSS in WPLMS = 4.972 versions...
WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme WPLMS versions = 4.972...