WordPress WPLMS Theme <= 4.962 is vulnerable to Path Traversal

Software WPLMS Type Theme Vulnerable versions = 4.962 Fixed in 4.963 OWASP Top 10 A3: Injection Classification Path Traversal CVE CVE-2024-10470 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 63557cc0ea32 Credits Foxyyy Required privilege Unauthenticated Published 8...

WordPress WPLMS Theme Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress WPLMS Theme Privilege Escalation', 'Description' = %q The WordPress WPLMS theme from version 1.5.2 to 1.8.4.1 allows an authenticated...

CVE-2023-36690

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

CVE-2023-36690

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

CVE-2023-36690 WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

CVE-2023-36690

CVE-2023-36690 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress theme WPLMS by VibeThemes, affecting versions earlier than 4.900. The CVE entry indicates an unauthenticated CSRF flaw in WPLMS; Patchstack notes the issue is fixed in version 4.900, implying users should ...

CVE-2023-36690 WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

CVE-2023-36690: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

PT-2023-25683

Name of the Vulnerable Software and Affected Versions VibeThemes WPLMS theme versions = 4.900 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

WPLMS < 4.900 - Cross-Site Request Forgery

The plugin does not adequately verify requests use nonces, making it susceptible to Cross-Site Request Forgery CSRF attacks...

WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)

Software WPLMS Type Theme Vulnerable versions 4.900 Fixed in 4.900 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-36690 Patch priority Low CVSS severity Low 8.1 Developer Claim ownership PSID fc1ff4d8cbe2 Credits Dave Jong Patchstack Required...

WordPress WPLMS 1.8.4.1 Privilege Escalation Vulnerability

WordPress WPLMS theme version 1.8.4.1 suffers from a privilege escalation vulnerability. ------------------------------------------------------------------------------ WordPress WPLMS Theme Previlege Escalation ------------------------------------------------------------------------------ - Autho...

WordPress WPLMS Learning Management System Theme <= 1.8.4.1 - Privilege Escalation

Because of this vulnerability, the attackers can have an administrator account on the target's website. Solution Update the theme...

WordPress WPLMS Theme Privilege Escalation

The WordPress WPLMS theme from version 1.5.2 to 1.8.4.1 allows an authenticated user of any user level to set any system option due to a lack of validation in the importdata function of /includes/func.php. The module first changes the admin e-mail address to prevent any notifications being sent t...

WPLMS 1.8.4.1 - Privilege Escalation

The wplms WordPress theme was affected by a Privilege Escalation security vulnerability...

WordPress WPLMS 1.8.4.1 Privilege Escalation

------------------------------------------------------------------------------ WordPress WPLMS Theme Previlege Escalation ------------------------------------------------------------------------------ - Author: Evex http://packetstormsecurity.com/user/evex/ twitter: https://twitter.com/Evexola -...