VibeThemes
Vulnerability activity for VibeThemes: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 2
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 3
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 9.3CriticalOct 9, 2026VibeThemes WPLMS SQL injectionCVE-2026-96327Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2.
- 8.5HighOct 9, 2026VibeThemes WPLMS SQL injectionCVE-2026-95607Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973.
- 7.1HighOct 6, 2026VibeThemes WPLMS XSSCVE-2026-39722Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.
- 6.5MediumDec 9, 2025Vibethemes wordpress learning management system XSSCVE-2025-63035Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based XSS.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.
Top products
- WPLMS3 CVEs in the last year, 1 critical
- wordpress learning management system1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.