wplms vulnerabilities
CVEs whose affected-version data names the wplms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-95607High· 8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973.
▾ TwilightVibeThemes · wplmsEPSS 0.21%via NVD
CVE-2026-39722High· 7.1Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.
Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.
▾ TwilightVibeThemes · wplmsEPSS 0.24%via NVD