PT-2026-28044 · Unknown · Wpfunnels Creator Lms

Published 2026-03-25 · Updated 2026-03-25 · CVE-2026-32530

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WPFunnels Creator LMS versions through 1.1.18

Description An incorrect privilege assignment exists in WPFunnels Creator LMS, potentially allowing privilege escalation. The issue allows for unauthorized access or actions due to flawed permission checks.

Recommendations Update WPFunnels Creator LMS to a version later than 1.1.18.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-32530

Affected Products

Wpfunnels Creator Lms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-32530 · Security Note
• https://twitter.com/CVEnew/status/2036911873103454523 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/creatorlms/vulnerability/wordpress-creator-lms-plugin-1-1-18-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/infoflowcloud/status/2036912517759258665 · Twitter Post