Show filters
22 Total Results
Displaying 11-20 of 22
Sort by:
Attacker Value
Unknown
CVE-2024-56054
Disclosure Date: December 18, 2024 (last updated December 19, 2024)
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a before 1.9.9.5.2.
0
Attacker Value
Unknown
CVE-2024-56053
Disclosure Date: December 18, 2024 (last updated December 19, 2024)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS allows SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.5.3.
0
Attacker Value
Unknown
CVE-2024-56052
Disclosure Date: December 18, 2024 (last updated December 19, 2024)
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a before 1.9.9.5.2.
0
Attacker Value
Unknown
CVE-2024-56051
Disclosure Date: December 18, 2024 (last updated December 19, 2024)
Improper Control of Generation of Code ('Code Injection') vulnerability in VibeThemes WPLMS allows Code Injection.This issue affects WPLMS: from n/a before 1.9.9.5.
0
Attacker Value
Unknown
CVE-2024-56050
Disclosure Date: December 18, 2024 (last updated December 19, 2024)
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a before 1.9.9.5.3.
0
Attacker Value
Unknown
CVE-2024-56049
Disclosure Date: December 18, 2024 (last updated December 19, 2024)
Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS allows Path Traversal.This issue affects WPLMS: from n/a before 1.9.9.5.2.
0
Attacker Value
Unknown
CVE-2024-56048
Disclosure Date: December 18, 2024 (last updated December 19, 2024)
Missing Authorization vulnerability in VibeThemes WPLMS allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through 1.9.9.
0
Attacker Value
Unknown
CVE-2024-56047
Disclosure Date: December 18, 2024 (last updated December 19, 2024)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS allows SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.5.3.
0
Attacker Value
Unknown
CVE-2024-10470
Disclosure Date: November 09, 2024 (last updated January 06, 2025)
The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and unlink functions in all versions up to, and including, 4.962. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The theme is vulnerable even when it is not activated.
0
Attacker Value
Unknown
CVE-2023-22672
Disclosure Date: July 17, 2023 (last updated October 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <= 4.1.2 versions.
0
