CVE-2024-56046: Vibethemes WordPress Learning Management System

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through <= 1.9.9.

Affected products

• Vibethemes WordPress Learning Management System: before 1.9.9.1 (fixed in 1.9.9.1)

Published 2024-12-31. Last modified 2026-06-17.