Letscms - vulnerabilities (CVEs)
5 CVEs in 3 products, 0 in the last 30 days, newest from 2025-10-17.
Products
- Binary Mlm For Woocommerce - 2 CVEs
- Binary Mlm Plan - 2 CVEs
- Unilevel Mlm Plan - 1 CVEs
Newest CVEs of Letscms
- CVE-2025-11895 - CVSS 4.3 (medium), 2025-10-17: The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 5.0. This is due to the…
- CVE-2025-10038 - CVSS 6.5 (medium), 2025-10-15: The Binary MLM Plan plugin for WordPress is vulnerable to limited Privilege Escalation in all versions up to, and including, 3.0. This is due to bmp_user role…
- CVE-2024-12384 - CVSS 6.1 (medium), 2025-01-07: The Binary MLM Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page’ parameter in all versions up to, and including,…
- CVE-2024-12383 - CVSS 6.1 (medium), 2025-01-07: The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing…
- CVE-2024-12324 - CVSS 6.1 (medium), 2025-01-07: The Unilevel MLM Plan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including,…
