CVE-2026-62083
Deferred Deferred - Pending Action

Stored Other Vulnerability in Creator LMS

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: Patchstack

Description
Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-10-19
AI Q&A
2026-09-30
EPSS Evaluated
2026-10-18
NVD
CVE-2026-62083
EUVD
EUVD-2026-89821

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack creator_lms_plugin to 1.2.19 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1284 The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a low-severity vulnerability in the WordPress Creator LMS Plugin versions 1.2.19 and below. It is classified as an 'Other Vulnerability Type' with a CVSS score of 5.4. The issue lacks a specific threat impact but is considered a security concern. The vulnerability does not require elevated privileges beyond the Subscriber role and is related to insecure design under OWASP Top 10 A4.

Detection Guidance

To detect this vulnerability, check the installed version of the Creator LMS plugin. If it is 1.2.19 or below, the system is vulnerable. Use commands like 'wp plugin list' in WordPress or inspect the plugin directory for version details.

Impact Analysis

The vulnerability may allow unauthorized actions or data exposure due to insecure design. While specific impacts are not detailed, it could potentially lead to information leakage or unauthorized modifications. Users should update to version 1.2.20 or later to mitigate risks.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with GDPR, HIPAA, or other standards. The vulnerability is classified as low severity with no specific threat impact mentioned, though it is noted as a security concern. Without details on data exposure or processing risks, its compliance implications remain unclear.

Mitigation Strategies

Update the Creator LMS plugin to version 1.2.20 or later immediately. If automatic updates are available, enable them. Otherwise, manually update through the WordPress admin panel or contact your hosting provider for assistance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-62083. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart