creatorlms vulnerabilities
CVEs whose affected-version data names the creatorlms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-62129Critical· 9.9Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
▾ MidnightWPFunnels · creatorlmsEPSS 0.26%via NVD
CVE-2026-62128Medium· 5.3Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through 1.2.21.
Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through 1.2.21.
▾ SunlitCreator LMS · creatorlmsEPSS 0.21%via NVD
CVE-2026-62083Medium· 5.4Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.
Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.
▾ SunlitWPFunnels · creatorlmsEPSS 0.23%via NVD
CVE-2026-97244High· 7.5Contributor Path Traversal in Creator LMS <= 1.2.19 versions.
Contributor Path Traversal in Creator LMS <= 1.2.19 versions.
▾ TwilightWPFunnels · creatorlmsEPSS 0.29%via NVD