Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Wplearnmanager Clear all filters
TI-2021-22588 CVE-2021-47975 · GHSA-x5v4-ww8v-7jhc

WordPress Plugin WP Learn Manager 1.1.2 Stored XSS

Priority MEDIUM 62

WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the `fieldtitle` parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00214 Published 2026-05-16 No fix listed CWE-79
TI-2021-06791 CVE-2021-24504 · GHSA-pqq6-8mr8-33fw

WP LMS <= 1.1.2 - Stored Cross-Site Scripting (XSS)

Priority LOW 29

The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00762 Published 2021-08-02 No fix listed CWE-352