Creator LMS vulnerabilities

3 known CVE vulnerabilities in Creator LMS, translated and rated.

CVE-2026-97244High
The Creator LMS plugin in versions up to and including 1.2.19 contains a Path Traversal vulnerability exploitable by a user with Contributor privileges.
CVE-2026-62083Medium
Creator LMS plugin version 1.2.19 and earlier contains an 'Other Vulnerability Type' vulnerability exploitable by subscribers, allowing unauthorized actions.
CVE-2025-69359Medium
The Creator LMS plugin (WPFunnels) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This affects Creator LMS from n/a through version 1.1.12.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS