CVE Tools
Track your stack

Wplms

22 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Wplms, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Wplms CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Wplms CVEs per month
MonthCVEs
2024-100
2024-111
2024-1215
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-091
2025-102
2025-110
2025-121
2026-011
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090

Severity

How the 22 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1045%
  • High1045%
  • Medium29%

Latest CVEs

The 15 most recently published vulnerabilities affecting Wplms.

  1. CVE-2025-69097WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability8.6
  2. CVE-2025-63035WordPress WPLMS plugin <= 1.9.9.5.4 - Cross Site Scripting (XSS) vulnerability6.5
  3. CVE-2025-53420WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability7.1
  4. CVE-2025-49925WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability7.5
  5. CVE-2025-58668WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability4.3
  6. CVE-2024-56045WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability9.3
  7. CVE-2024-56044WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability9.8
  8. CVE-2024-56043WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability9.8
  9. CVE-2024-56042WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability9.3
  10. CVE-2024-56046WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability10.0
  11. CVE-2024-56047WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability8.5
  12. CVE-2024-56053WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability7.6
  13. CVE-2024-56048WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability8.8
  14. CVE-2024-56050WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability9.9
  15. CVE-2024-56052WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability9.9

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store