A critical security flaw has been discovered in the WPLMS Learning Management System for WordPress, a popular WordPress LMS theme. This vulnerability, identified as CVE-2024-10470, could allow attackers to gain significant control over affected websites.
The problem lies within the theme’s handling of file operations. Specifically, the theme contains flaws in how it validates file paths and checks permissions in its `readfile` and `unlink` functions. This oversight means that an attacker, even without logging into your site, could potentially read and delete any file on your server.
The most severe implication of this vulnerability is the potential for Remote Code Execution (RCE). If an attacker manages to delete crucial files like `wp-config.php`, which contains vital WordPress configuration and database credentials, they could then install their own code and take full control of your website. This vulnerability is present in the theme even if it is not currently activated on your WordPress site.
CVE Details
- Product: WPLMS Learning Management System for WordPress
- CVE ID: CVE-2024-10470
- Published: November 9, 2024
- Last Modified: December 23, 2025
- Status: Analyzed
Affected Products
All versions of the WPLMS Learning Management System for WordPress theme up to, and including, version 4.962 are vulnerable. If you are using WPLMS version 4.962 or an older version, your website is at risk.
Current Status
The vulnerability has been officially analyzed and assigned a CVE ID. Security researchers and vendors are aware of the issue and have made the details public to inform users.
Severity Level
This vulnerability is rated as CRITICAL, with a CVSS score of 9.8. This is the highest possible severity rating, indicating an extremely serious risk. A critical rating means that the vulnerability is easy to exploit, often remotely, and can lead to complete compromise of the system with little or no user interaction. The ability for unauthenticated attackers to delete arbitrary files, potentially leading to RCE, highlights the extreme danger this flaw poses.
Possible Solutions
The most important step to protect your WordPress site is to update your WPLMS Learning Management System theme immediately. The developers have likely released a patched version that addresses these critical file handling issues. Always back up your website before performing any updates.
If an update is not immediately available, consider temporarily deactivating and removing the WPLMS theme until a secure version is released. However, as noted, the theme can be vulnerable even when not activated, so a complete removal might be necessary as a temporary measure.
Additionally, consider implementing a robust WordPress security plugin (such as Wordfence, which initially reported this vulnerability) to help monitor for suspicious activity and provide an additional layer of defense. Regular backups of your entire WordPress installation are always a critical safeguard against any data loss or compromise.
References
https://themeforest.net/item/wplms-learning-management-system/6780226
https://www.wordfence.com/threat-intel/vulnerabilities/id/1932c9b4-2fea-40f8-9748-09ded8143c11?source=cve
