WordPress security by component

Fox LMS

Plugin description

Fox LMS is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 13, 2026; the highest CVE/CNA score is 8.5.

Plugin slug: fox-lms

Latest vulnerability

CVE-2026-31922: Fox LMS: SQL injection

Fox LMS is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedMar 13, 2026

Safe version guidanceSee mitigation notes

		Safe version
Mar 13, 2026	CVE-2026-31922 Fox LMS: SQL injection Fox LMS is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.5 NVDPending