2 matches found
CVE-2023-36690
Cross-Site Request Forgery (CSRF) vulnerability in VibeThemes WPLMS theme
CVE-2024-10470
The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and unlink functions in all versions up to, and including, 4.962. This makes it pos...