Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-9398

Malware in sbrugna...

8.8CVSS6.4AI score0.67724EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-40633

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00096EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/22 6:38 p.m.4 views

WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme WPLMS versions = 4.970...

9.8CVSS7AI score0.00049EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/09/22 6:22 p.m.7 views

CVE-2025-58668 WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability

Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through = 4.970...

4.3CVSS0.00049EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:22 p.m.2 views

CVE-2025-58668 WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability

Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through = 4.970...

4.3CVSS5.9AI score0.00049EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/22 12:0 a.m.3 views

WordPress WPLMS Theme <= 4.970 is vulnerable to Broken Access Control

Software WPLMS Type Theme Vulnerable versions = 4.970 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-58668 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b45c9c5a0459 Credits Rafie Muhammad Patchstack Required privile...

4.3CVSS5.8AI score0.00049EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/07/21 12:3 p.m.4 views

CVE-2015-10139

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wpajaximportdata' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account...

8.8CVSS6.2AI score0.67724EPSS
Exploits1References1
NVD
NVD
added 2025/07/19 12:15 p.m.3 views

CVE-2015-10139

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wpajaximportdata' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account...

8.8CVSS0.67724EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/07/19 11:23 a.m.3 views

CVE-2015-10139 WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wpajaximportdata' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account...

8.8CVSS6.2AI score0.67724EPSS
Exploits1References6
CVE
CVE
added 2025/07/19 11:23 a.m.14 views

CVE-2015-10139

CVE-2015-10139 affects the WPLMS WordPress theme and allows privilege escalation via the wp_ajax_import_data AJAX action in versions 1.5.2–1.8.4.1. Authenticated attackers could modify restricted settings and potentially create a new admin account. The issue is tied to an API/endpoint exposed to ...

8.8CVSS6.3AI score0.67724EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.1 views

PT-2025-30133

Name of the Vulnerable Software and Affected Versions WPLMS versions 1.5.2 through 1.8.4.1 Description The WPLMS theme for WordPress is susceptible to privilege escalation via the wp ajax import data API endpoint. Authenticated attackers can modify restricted settings and potentially create a new...

8.8CVSS6.7AI score0.67724EPSS
Exploits1References11
RedhatCVE
RedhatCVE
added 2025/05/23 5:4 a.m.4 views

CVE-2023-36690

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

8.8CVSS7.1AI score0.00096EPSS
Exploits0
GithubExploit
GithubExploit
added 2024/11/30 2:45 a.m.69 views

Exploit for CVE-2024-10470

CVE-2024-10470 WPLMS Learning Management System for WordPress...

9.8CVSS9.9AI score0.48485EPSS
Exploits2
Wordfence Blog
Wordfence Blog
added 2024/11/08 5:50 p.m.22 views

28,000 WordPress Sites Affected by Arbitrary File Read and Deletion Vulnerability in WPLMS WordPress Theme

🦸 👻 Calling all superheroes and haunters! Introducing theCybersecurity Month Spooktacular Haunt and the WordPress Superhero Challenge for the Wordfence Bug Bounty Program! Through November 11th, 2024: All in-scope vulnerability types for WordPress plugins/themes with = 1,000 active installations...

9.8CVSS8.3AI score0.48485EPSS
Exploits2
OSV
OSV
added 2023/07/11 1:15 p.m.0 views

CVE-2023-36690

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

8.8CVSS7.3AI score0.00096EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/07/11 12:1 p.m.17 views

CVE-2023-36690 WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

8.1CVSS7.1AI score0.00096EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/07/11 12:1 p.m.15 views

CVE-2023-36690 WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VibeThemes WPLMS theme = 4.900 versions...

8.1CVSS9AI score0.00096EPSS
Exploits0References1
0day.today
0day.today
added 2015/02/09 12:0 a.m.20 views

WordPress WPLMS 1.8.4.1 Privilege Escalation Vulnerability

WordPress WPLMS theme version 1.8.4.1 suffers from a privilege escalation vulnerability. ------------------------------------------------------------------------------ WordPress WPLMS Theme Previlege Escalation ------------------------------------------------------------------------------ - Autho...

7.3AI score
Exploits0
Rows per page
Query Builder