Threat database

28 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.5	EPSS 0.2%	CVE-2026-95607WPLMS · SQL Injection High8.5EPSS 0.2%2026-10-09CVE Database V5CVE-2026-95607 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973. EPSS 0.2%Vulnerability VibeThemes	CVE Database V5	2026-10-09
Critical	9.3	EPSS 0.3%	CVE-2026-96327WPLMS · SQL Injection Critical9.3EPSS 0.3%2026-10-09CVE Database V5CVE-2026-96327 CVE-2026-96327 is a critical SQL Injection vulnerability in the VibeThemes WPLMS plugin. It allows an attacker to perform Blind SQL Injection due to improper neutralization of special elements in SQL commands. The issue affects all versions from initial releases up to but not including version 1.9.9.8.2. The vulnerability has a high CVSS score of 9.3, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality and availability. EPSS 0.3%Vulnerability VibeThemes	CVE Database V5	2026-10-09
High	7.1	EPSS 0.2%	CVE-2026-39722WPLMS · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39722 Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions. EPSS 0.2%Vulnerability VibeThemes #cwe-79	CVE Database V5	2026-10-06
High	8.6	EPSS 0.5%	CVE-2025-69097WPLMS · Path Traversal High8.6EPSS 0.5%2026-01-22CVE Database V5CVE-2025-69097 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through <= 1.9.9.5.4. EPSS 0.5%Vulnerability VibeThemes	CVE Database V5	2026-01-22
Medium	6.5	EPSS 0.2%	CVE-2025-63035WPLMS · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-09CVE Database V5CVE-2025-63035 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows DOM-Based XSS.This issue affects WPLMS: from n/a through <= 1.9.9.5.4. EPSS 0.2%Vulnerability VibeThemes #cwe-79	CVE Database V5	2025-12-09
High	7.1	EPSS 0.3%	CVE-2025-53420WPLMS · Cross-site Scripting High7.1EPSS 0.3%2025-10-22CVE Database V5CVE-2025-53420 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8. EPSS 0.3%Vulnerability VibeThemes	CVE Database V5	2025-10-22
High	7.5	EPSS 0.4%	CVE-2025-49925WPLMS · Missing Authorization High7.5EPSS 0.4%2025-10-22CVE Database V5CVE-2025-49925 Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7. EPSS 0.4%Vulnerability VibeThemes	CVE Database V5	2025-10-22
Medium	4.3	EPSS 0.3%	CVE-2025-58668WPLMS · Missing Authorization Medium4.3EPSS 0.3%2025-09-22CVE Database V5CVE-2025-58668 Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970. EPSS 0.3%Vulnerability VibeThemes	CVE Database V5	2025-09-22
Medium	5.9	EPSS 0.4%	CVE-2025-32493BP Social Connect · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in VibeThemes BP… Medium5.9EPSS 0.4%2025-04-09CVE Database V5CVE-2025-32493 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes BP Social Connect bp-social-connect allows Stored XSS.This issue affects BP Social Connect: from n/a through <= 1.6.2. EPSS 0.4%Vulnerability VibeThemes	CVE Database V5	2025-04-09
Critical	9.3	EPSS 0.7%	CVE-2024-56045WPLMS · Path Traversal: '.../...//' Critical9.3EPSS 0.7%2024-12-31CVE Database V5CVE-2024-56045 Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5. EPSS 0.7%Vulnerability VibeThemes	CVE Database V5	2024-12-31
Critical	9.8	EPSS 0.8%	CVE-2024-56044WPLMS · Authentication Bypass Using an Alternate Path or Channel Critical9.8EPSS 0.8%2024-12-31CVE Database V5CVE-2024-56044 Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentication Bypass.This issue affects WPLMS: from n/a through <= 1.9.9. EPSS 0.8%Vulnerability VibeThemes	CVE Database V5	2024-12-31
Critical	9.8	EPSS 0.6%	CVE-2024-56043WPLMS · Incorrect Privilege Assignment Critical9.8EPSS 0.6%2024-12-31CVE Database V5CVE-2024-56043 Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.This issue affects WPLMS: from n/a through <= 1.9.9. EPSS 0.6%Vulnerability VibeThemes	CVE Database V5	2024-12-31
Critical	9.8	EPSS 0.8%	CVE-2024-56040VibeBP · Incorrect Privilege Assignment Critical9.8EPSS 0.8%2024-12-31CVE Database V5CVE-2024-56040 Incorrect Privilege Assignment vulnerability in VibeThemes VibeBP vibebp allows Privilege Escalation.This issue affects VibeBP: from n/a through <= 1.9.9.4.1. EPSS 0.8%Vulnerability VibeThemes	CVE Database V5	2024-12-31
Critical	9.3	EPSS 0.7%	CVE-2024-56042WPLMS · SQL Injection Critical9.3EPSS 0.7%2024-12-31CVE Database V5CVE-2024-56042 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3. EPSS 0.7%Vulnerability VibeThemes	CVE Database V5	2024-12-31
High	8.5	EPSS 0.5%	CVE-2024-56041VibeBP · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in VibeThemes… High8.5EPSS 0.5%2024-12-31CVE Database V5CVE-2024-56041 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.5.1. EPSS 0.5%Vulnerability VibeThemes	CVE Database V5	2024-12-31
Critical	9.3	EPSS 0.6%	CVE-2024-56039VibeBP · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in VibeThemes… Critical9.3EPSS 0.6%2024-12-31CVE Database V5CVE-2024-56039 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.7.7. EPSS 0.6%Vulnerability VibeThemes	CVE Database V5	2024-12-31
Critical	10.0	EPSS 0.8%	CVE-2024-56046WPLMS · Unrestricted Upload of File with Dangerous Type Critical10.0EPSS 0.8%2024-12-31CVE Database V5CVE-2024-56046 Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through <= 1.9.9. EPSS 0.8%Vulnerability VibeThemes	CVE Database V5	2024-12-31
High	8.5	EPSS 0.6%	CVE-2024-56047WPLMS · SQL Injection High8.5EPSS 0.6%2024-12-18CVE Database V5CVE-2024-56047 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3. EPSS 0.6%Vulnerability VibeThemes	CVE Database V5	2024-12-18
High	7.6	EPSS 0.4%	CVE-2024-56053WPLMS · SQL Injection High7.6EPSS 0.4%2024-12-18CVE Database V5CVE-2024-56053 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows SQL Injection.This issue affects WPLMS: from n/a through < 1.9.9.5.3. EPSS 0.4%Vulnerability VibeThemes	CVE Database V5	2024-12-18
High	8.8	EPSS 0.6%	CVE-2024-56048WPLMS · Missing Authorization High8.8EPSS 0.6%2024-12-18CVE Database V5CVE-2024-56048 Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9. EPSS 0.6%Vulnerability VibeThemes	CVE Database V5	2024-12-18

Showing 1–20 of 28 results