All packages
WPLMS vulnerabilities
3 known CVE vulnerabilities in WPLMS, translated and rated.
- CVE-2026-39722High
Unauthenticated Cross Site Scripting (XSS) in WPLMS versions up to 4.972.
- CVE-2025-63035Medium
DOM-Based XSS vulnerability in WPLMS plugin by VibeThemes. Improper input neutralization during web page generation allows client-side script injection.
- CVE-2025-53420High
Reflected XSS vulnerability in VibeThemes WPLMS plugin (wplms_plugin) up to version 1.9.9.8 due to improper input neutralization during web page generation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS