VibeThemes kayıtları
vibethemes üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %4
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %72
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type5
- CWE-862 Missing Authorization3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-35 Path Traversal: '.../...//'3
- CWE-288 Authentication Bypass Using an Alternate Path or Channel2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
49Planlayın | CVE-2024-10470Kavram kanıtı | WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletionvibethemes · wordpress learning management system · CWE-22 | Kritik9,8 | — | %34,7 | 9 Kas 2024 |
40Planlayın | CVE-2015-10139Silahlaştırılmış | WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalationvibethemes · wordpress learning management system · CWE-269 | Yüksek8,8 | — | %1,8 | 19 Tem 2025 |
39İzleyin | CVE-2023-2704İstismar yok | BP Social Connect <= 1.5 - Authentication Bypassvibethemes · bp social connect · CWE-288 | Kritik9,8 | — | %1,6 | 18 May 2023 |
39İzleyin | CVE-2024-56044İstismar yok | WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerabilityvibethemes · wordpress learning management system · CWE-288 | Kritik9,8 | — | %0,8 | 31 Ara 2024 |
39İzleyin | CVE-2024-56046İstismar yok | WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerabilityvibethemes · wordpress learning management system · CWE-434 | Kritik9,8 | — | %0,7 | 31 Ara 2024 |
39İzleyin | CVE-2024-56042İstismar yok | WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerabilityvibethemes · wordpress learning management system · CWE-89 | Kritik9,8 | — | %0,6 | 31 Ara 2024 |
39İzleyin | CVE-2024-56043İstismar yok | WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerabilityvibethemes · wordpress learning management system · CWE-266 | Kritik9,8 | — | %0,6 | 31 Ara 2024 |
39İzleyin | CVE-2025-58668İstismar yok | WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerabilityvibethemes · wordpress learning management system · CWE-862 | Kritik9,8 | — | %0,2 | 22 Eyl 2025 |
37İzleyin | CVE-2024-56045İstismar yok | WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerabilityvibethemes · wordpress learning management system · CWE-35 | Kritik9,3 | — | %0,7 | 31 Ara 2024 |
35İzleyin | CVE-2024-56050İstismar yok | WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerabilityvibethemes · wordpress learning management system · CWE-434 | Yüksek8,8 | — | %0,6 | 18 Ara 2024 |
35İzleyin | CVE-2024-56052İstismar yok | WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerabilityvibethemes · wordpress learning management system · CWE-434 | Yüksek8,8 | — | %0,6 | 18 Ara 2024 |
35İzleyin | CVE-2024-56047İstismar yok | WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerabilityvibethemes · wordpress learning management system · CWE-89 | Yüksek8,8 | — | %0,6 | 18 Ara 2024 |
35İzleyin | CVE-2024-56048İstismar yok | WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerabilityvibethemes · wordpress learning management system · CWE-862 | Yüksek8,8 | — | %0,6 | 18 Ara 2024 |
35İzleyin | CVE-2024-56054İstismar yok | WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerabilityvibethemes · wordpress learning management system · CWE-434 | Yüksek8,8 | — | %0,5 | 18 Ara 2024 |
35İzleyin | CVE-2024-56057İstismar yok | WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerabilityvibethemes · wordpress learning management system · CWE-434 | Yüksek8,8 | — | %0,5 | 18 Ara 2024 |
35İzleyin | CVE-2024-56055İstismar yok | WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerabilityvibethemes · wordpress learning management system · CWE-35 | Yüksek8,8 | — | %0,4 | 18 Ara 2024 |
35İzleyin | CVE-2024-56051İstismar yok | WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerabilityvibethemes · wordpress learning management system · CWE-94 | Yüksek8,8 | — | %0,4 | 18 Ara 2024 |
35İzleyin | CVE-2024-56053İstismar yok | WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerabilityvibethemes · wordpress learning management system · CWE-89 | Yüksek8,8 | — | %0,4 | 18 Ara 2024 |
35İzleyin | CVE-2023-36690İstismar yok | WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)vibethemes · wordpress learning management system · CWE-352 | Yüksek8,8 | — | %0,3 | 11 Tem 2023 |
35İzleyin | CVE-2023-22672İstismar yok | WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)vibethemes · vslider · CWE-352 | Yüksek8,8 | — | %0,2 | 17 Tem 2023 |
34İzleyin | CVE-2024-56049İstismar yok | WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerabilityvibethemes · wordpress learning management system · CWE-35 | Yüksek8,5 | — | %0,4 | 18 Ara 2024 |
30İzleyin | CVE-2025-49925İstismar yok | WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerabilityvibethemes · wordpress learning management system · CWE-862 | Yüksek7,5 | — | %0,3 | 22 Eki 2025 |
28İzleyin | CVE-2025-53420İstismar yok | WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerabilityvibethemes · wordpress learning management system · CWE-79 | Yüksek7,1 | — | %0,2 | 22 Eki 2025 |
26İzleyin | CVE-2025-63035İstismar yok | WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerabilityvibethemes · wordpress learning management system · CWE-79 | Orta6,5 | — | %0,1 | 9 Ara 2025 |
19İzleyin | CVE-2023-25797İstismar yok | WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS)vibethemes · vslider · CWE-79 | Orta4,8 | — | %0,3 | 3 May 2023 |
- CVE-2024-1047049Planlayın
WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion
KritikCVSS 9,8Kavram kanıtıEPSS %34vibethemes · wordpress learning management system9 Kas 2024
- CVE-2015-1013940Planlayın
WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation
YüksekCVSS 8,8SilahlaştırılmışEPSS %1vibethemes · wordpress learning management system 19 Tem 2025
- CVE-2023-270439İzleyin
BP Social Connect <= 1.5 - Authentication Bypass
KritikCVSS 9,8İstismar yokEPSS %1vibethemes · bp social connect18 May 2023
- CVE-2024-5604439İzleyin
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0vibethemes · wordpress learning management system31 Ara 2024
- CVE-2024-5604639İzleyin
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability
KritikCVSS 9,8İstismar yokEPSS %0vibethemes · wordpress learning management system31 Ara 2024
- CVE-2024-5604239İzleyin
WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0vibethemes · wordpress learning management system31 Ara 2024
- CVE-2024-5604339İzleyin
WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0vibethemes · wordpress learning management system31 Ara 2024
- CVE-2025-5866839İzleyin
WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0vibethemes · wordpress learning management system22 Eyl 2025
- CVE-2024-5604537İzleyin
WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability
KritikCVSS 9,3İstismar yokEPSS %0vibethemes · wordpress learning management system31 Ara 2024
- CVE-2024-5605035İzleyin
WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2024-5605235İzleyin
WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2024-5604735İzleyin
WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2024-5604835İzleyin
WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2024-5605435İzleyin
WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2024-5605735İzleyin
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2024-5605535İzleyin
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2024-5605135İzleyin
WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2024-5605335İzleyin
WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2023-3669035İzleyin
WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · wordpress learning management system11 Tem 2023
- CVE-2023-2267235İzleyin
WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0vibethemes · vslider17 Tem 2023
- CVE-2024-5604934İzleyin
WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0vibethemes · wordpress learning management system18 Ara 2024
- CVE-2025-4992530İzleyin
WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0vibethemes · wordpress learning management system22 Eki 2025
- CVE-2025-5342028İzleyin
WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0vibethemes · wordpress learning management system22 Eki 2025
- CVE-2025-6303526İzleyin
WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0vibethemes · wordpress learning management system9 Ara 2025
- CVE-2023-2579719İzleyin
WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0vibethemes · vslider3 May 2023