SQL Injection Vulnerability in VibeThemes WPLMS Product
CVE-2024-56053

Currently unrated

Key Information:

Vendor

VibeThemes

Status
WPLMS
Vendor
CVE Published:
18 December 2024

What is CVE-2024-56053?

An SQL Injection vulnerability exists in VibeThemes WPLMS that allows attackers to improperly manipulate database queries. This security flaw affects versions of WPLMS prior to 1.9.9.5.3, potentially enabling unauthorized access to sensitive data. By exploiting this vulnerability, attackers can execute arbitrary SQL commands, compromising the integrity and confidentiality of the database. It is crucial for users to update to the latest version to mitigate this risk.

References

https://patchstack.com/database/wordpress/plugin/wplms-pl...

Timeline

  • Vulnerability published

.