CVE-2015-10139

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
VibeThemes	WPLMS Learning Management System for WordPress, WordPress LMS	<= 1.8.4.1

References

https://packetstormsecurity.com/files/130291/Exploit, Third Party Advisory
https://themeforest.net/item/wplms-learning-management-system/6780226Product
https://twitter.com/_wpscan_/status/564874637679820800?lang=caBroken Link
https://wpscan.com/vulnerability/7785Broken Link
https://www.rapid7.com/db/modules/auxiliary/admin/http/wp_wplms_privilege_escalation/Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/6e0e8f5f-8216-4276-a810-860f9b52c447?source=cveThird Party Advisory

Timeline

Published: Jul 19, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2015

CVE-2015-10147.3A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running CVE-2015-101408.8The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as CVE-2015-101419.3An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed b CVE-2015-101426.9Sitecore Experience Platform (XP) prior to 8.0 Initial Release (rev. 141212) and Content Management System (CMS) prior to 7.2 Update-3 (rev.CVE-2015-101439.8The Platform theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing c CVE-2015-101448.8The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the vi CVE-2015-101458.8Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utility/run_commands.sh. T CVE-2015-101464.9The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and inc CVE-2015-101474.9The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and i CVE-2015-101488.2Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and OpenBAT prior to 9.10 are shipped with identical default SSH and SSL CVE-2015-10152.1Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password sto CVE-2015-10264.3Multiple cross-site scripting (XSS) vulnerabilities in ZOHO ManageEngine ADManager Plus before 6.2 Build 6270 allow remote attackers to inje