Path Traversal Vulnerability in VibeThemes WPLMS Plugin
CVE-2025-69097

8.6HIGH

Key Information:

Vendor

WordPress
Status
WPlms
Vendor
CVE Published:
22 January 2026

What is CVE-2025-69097?

The VibeThemes WPLMS Plugin suffers from a Path Traversal vulnerability that enables attackers to traverse directories unexpectedly. This could lead to unauthorized access to sensitive files within the system. Specifically, this flaw allows for file manipulation beyond intended directories, which may result in arbitrary file deletion or exposure of confidential information. Affected versions include all prior to and including 1.9.9.5.4, necessitating prompt action for users to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

WPLMS <= n/a

References

https://patchstack.com/database/Wordpress/Plugin/wplms_pl...
vdb-entry

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
JSON
.