CVE-2026-62083
MediumCVSS 5.4Summary
Creator LMS plugin version 1.2.19 and earlier contains an 'Other Vulnerability Type' vulnerability exploitable by subscribers, allowing unauthorized actions.
Risk Assessment
Risk of unauthorized actions in the LMS system, potentially affecting data integrity or availability.
Recommendation
Update the Creator LMS plugin to the latest available version that includes the fix.
Other vulnerabilities in Creator LMS
See all- CVE-2026-97244High
The Creator LMS plugin in versions up to and including 1.2.19 contains a Path Traversal vulnerability exploitable by a user with Contributor privileges.
- CVE-2025-69359Medium
The Creator LMS plugin (WPFunnels) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This affects Creator LMS from n/a through version 1.1.12.
Original NVD description (English source)
Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS