Threat database

28 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.9	EPSS 0.7%	CVE-2024-56050WPLMS · Unrestricted Upload of File with Dangerous Type Critical9.9EPSS 0.7%2024-12-18CVE Database V5CVE-2024-56050 Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.3. EPSS 0.7%Vulnerability VibeThemes	CVE Database V5	2024-12-18
Critical	9.9	EPSS 0.7%	CVE-2024-56052WPLMS · Unrestricted Upload of File with Dangerous Type Critical9.9EPSS 0.7%2024-12-18CVE Database V5CVE-2024-56052 Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2. EPSS 0.7%Vulnerability VibeThemes	CVE Database V5	2024-12-18
Critical	9.1	EPSS 0.6%	CVE-2024-56054WPLMS · Unrestricted Upload of File with Dangerous Type Critical9.1EPSS 0.6%2024-12-18CVE Database V5CVE-2024-56054 Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2. EPSS 0.6%Vulnerability VibeThemes	CVE Database V5	2024-12-18
Critical	9.9	EPSS 0.6%	CVE-2024-56057WPLMS · Unrestricted Upload of File with Dangerous Type Critical9.9EPSS 0.6%2024-12-18CVE Database V5CVE-2024-56057 Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2. EPSS 0.6%Vulnerability VibeThemes	CVE Database V5	2024-12-18
High	8.5	EPSS 0.5%	CVE-2024-56049WPLMS · Path Traversal: '.../...//' High8.5EPSS 0.5%2024-12-18CVE Database V5CVE-2024-56049 Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2. EPSS 0.5%Vulnerability VibeThemes	CVE Database V5	2024-12-18
High	8.5	EPSS 0.5%	CVE-2024-56055WPLMS · Path Traversal: '.../...//' High8.5EPSS 0.5%2024-12-18CVE Database V5CVE-2024-56055 Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2. EPSS 0.5%Vulnerability VibeThemes	CVE Database V5	2024-12-18
High	8.5	EPSS 0.5%	CVE-2024-56051WPLMS · Code Injection High8.5EPSS 0.5%2024-12-18CVE Database V5CVE-2024-56051 Improper Control of Generation of Code ('Code Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Code Injection.This issue affects WPLMS: from n/a through < 1.9.9.5. EPSS 0.5%Vulnerability VibeThemes	CVE Database V5	2024-12-18
Critical	9.8	EPSS 34%	CVE-2024-10470WPLMS Learning Management System for WordPress, WordPress LMS · Path Traversal Critical9.8EPSS 34%2024-11-09CVE Database V5CVE-2024-10470 The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and unlink functions in all versions up to, and including, 4.962. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The theme is vulnerable even when it is not activated. EPSS 34%Vulnerability VibeThemes #cwe-22	CVE Database V5	2024-11-09

Showing 21–28 of 28 results