Letscms
5 CVEs across 3 Letscms products. Browse Letscms vulnerabilities, severities, and proof-of-concept exploits.
Letscms products with known CVEs
Letscms CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-11895 | Medium | 4.3 | 2025-10-17 | The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 5.0. This is due to the bmp_user_p… |
CVE-2025-10038 | Medium | 6.5 | 2025-10-15 | The Binary MLM Plan plugin for WordPress is vulnerable to limited Privilege Escalation in all versions up to, and including, 3.0. This is due to bmp_user role… |
CVE-2024-12384 | Medium | 6.1 | 2025-01-07 | The Binary MLM Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page’ parameter in all versions up to, and including… |
CVE-2024-12383 | Medium | 6.1 | 2025-01-07 | The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing o… |
CVE-2024-12324 | Medium | 6.1 | 2025-01-07 | The Unilevel MLM Plan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.1.0… |