CVE-2026-62083— WordPress Creator LMS plugin <= 1.2.19 - Other vulnerability Type vulnerability
Quick assessment
Affected
WPFunnels Creator LMS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Creator LMS 版本 <= 1.2.19 中的订阅者其他类型漏洞。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-62083
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Creator LMS plugin <= 1.2.19 - Other vulnerability Type vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1284
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WPFunnels | Creator LMS | n/a ~ 1.2.19 | - |
|
II. Public POCs for CVE-2026-62083
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-62083
请登录查看更多情报信息。
Other References for CVE-2026-62083 (1)
Same Patch Batch · WPFunnels · 2026-09-30 · 4 CVEs total
| CVE-2026-97244 | 7.5 HIGH | WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability |
| CVE-2026-27371 | 7.1 HIGH | WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-97271 | 7.1 HIGH | WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability |
IV. Related Vulnerabilities
Same vendor: WPFunnels
-
CVE-2026-97271
WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting -
CVE-2026-97244
WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vuln -
CVE-2026-27371
WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site -
CVE-2026-84755
WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control -
CVE-2026-84754
WordPress WPFunnels plugin <= 3.12.13 - Broken Access Contro
Same weakness: CWE-1284
-
CVE-2026-86133
Fireware OS Pre-Authentication Integer Underflow in iked All -
CVE-2026-75806
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes D -
CVE-2026-97058
sprintf-js through 1.1.3 Denial of Service via Unbounded Pre -
CVE-2026-97057
redis-parser through 3.0.0 Denial of Service via Invalid Arr -
CVE-2026-12974
Security Policy Bypass in Forcepoint Security Engine (NGFW)
V. Comments for CVE-2026-62083
No comments yet