Vulnerabilidades en VibeThemes
28 resultadosAnálisis Vexday
VibeThemes apresenta 27 vulnerabilidades catalogadas, com 12 delas classificadas como críticas, predominantemente relacionadas a upload de arquivo sem validação adequada (CWE-434). Apesar do volume significativo, nenhuma vulnerabilidade está sob exploração ativa confirmada (KEV), e a ausência de publicações recentes sugere que o risco é conhecido mas não emergente no horizonte imediato.
CVE-2024-56049HIGHWordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerabilityEPSS 0.4%CVE-2024-56053HIGHWordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerabilityEPSS 0.4%CVE-2025-32493MEDIUMWordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-49925HIGHWordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-36690HIGHWordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-58668MEDIUMWordPress WPLMS theme <= 4.970 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-53420HIGHWordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-63035MEDIUMWordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%