LMS - Education WordPress Theme

LMS - Education WordPress Theme has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include SQL Injection.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, most of them (2) reported by Frank.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all LMS - Education WordPress Theme vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2026-27404

LMS <= 9.7 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2026-06-30 00:00	LMS <= 9.7 - Reflected Cross-Site Scripting LMS - Education WordPress Theme <= 9.7	`CVE-2026-27404`	6.1 Medium	João Pedro S Alcântara (Kinorth)	No
2025-06-30 00:00	LMS <= 9.2 - Unauthenticated SQL Injection LMS - Education WordPress Theme <= 9.2	`CVE-2025-52833`	7.5 High	Frank	Yes
2025-06-23 00:00	LMS <= 9.2 - Reflected Cross-Site Scripting LMS - Education WordPress Theme <= 9.2	`CVE-2025-52799`	6.1 Medium	Frank	Yes

Showing 1–3 of 3 reports