Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
VibeThemes records in CISA KEVNo VibeThemes vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Wordpress Learning Management System · all components
Priority MEDIUM 42
The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0184 · Published 2025-07-19 · No fix listed CWE-269
Open these records in search →