CVE-2026-62083Medium· 5.4▾ SunlitSubscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-62129Critical· 9.9Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
CVE-2026-62128Medium· 5.3Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through 1.2.21.
CVE-2026-97244High· 7.5Contributor Path Traversal in Creator LMS <= 1.2.19 versions.
CVE-2026-97269Medium· 6.5Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.
CVE-2026-27371High· 7.1Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
CVE-2026-97271High· 7.1Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.