CVE-2025-15347 - Creator LMS – The LMS for Creators, Coaches, and Trainers <= 1.1.12 - missing au...

CVE ID : CVE-2025-15347 Published : Jan. 20, 2026, 2:26 p.m. | 23 minutes ago Description : The Creator LMS – The LMS for Creators, Coaches, and Trainers plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in the get_items_permissions_check function in all versions up to, and including, 1.1.12. This makes it possible for authenticated attackers, with contributor level access and above, to update arbitrary WordPress options. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...