CVE-2024-56053: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows SQL Injection.This issue affects WPLMS: from n/a through 1.9.9.5.3...

PT-2024-36692

Name of the Vulnerable Software and Affected Versions WPLMS versions prior to 1.9.9.5.2 Description The issue allows uploading a web shell to a web server due to unrestricted file upload with dangerous types. This enables potential attackers to execute malicious code on the server. Recommendation...

WordPress plugin WPLMS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...

PT-2024-36687

Name of the Vulnerable Software and Affected Versions VibeThemes WPLMS versions prior to 1.9.9.5 Description The issue is related to improper control of code generation, allowing code injection. This problem enables the injection of code, potentially leading to unauthorized access or execution of...

CVE-2024-56051: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Code Injection.This issue affects WPLMS: from n/a through 1.9.9.5...

WordPress plugin WPLMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin WPLMS SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin WPLMS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...

WordPress plugin WPLMS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...

PT-2024-36684

Name of the Vulnerable Software and Affected Versions WPLMS versions prior to 1.9.9.5.2 Description The issue is related to a Path Traversal vulnerability, allowing directory traversal using '.../...//' characters. This problem affects WPLMS, enabling potential unauthorized access to files and...

PT-2024-36682

Name of the Vulnerable Software and Affected Versions VibeThemes WPLMS versions prior to 1.9.9.5.3 Description The issue is related to the improper neutralization of special elements used in SQL commands, allowing SQL injection. This problem can be exploited to inject SQL code, potentially leadin...

CVE-2024-56055: Path Traversal: '.../...//'

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplmsplugin allows Path Traversal.This issue affects WPLMS: from n/a through 1.9.9.5.2...

WordPress plugin WPLMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-36683

Name of the Vulnerable Software and Affected Versions WPLMS versions prior to 1.9.9 Description The issue is related to a missing authorization vulnerability in VibeThemes WPLMS, which allows accessing functionality not properly constrained by Access Control Lists ACLs. Recommendations For versio...

CVE-2024-56054: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplmsplugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9.5.2...

CVE-2024-56057: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplmsplugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9.5.2...

CVE-2024-56050: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplmsplugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9.5.3...

PT-2024-36688

Name of the Vulnerable Software and Affected Versions WPLMS versions prior to 1.9.9.5.2 Description The issue allows for the upload of a web shell to a web server due to unrestricted file upload with dangerous types. This enables potential attackers to execute malicious code on the server...

WordPress plugin WPLMS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...

PT-2024-36689

Name of the Vulnerable Software and Affected Versions WPLMS versions prior to 1.9.9.5.3 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially enabling unauthorized...