# CVE-2026-62083: Creator LMS plugin other vulnerability type

Source: https://junglewise.ai/threats/cve-2026-62083-subscriber-other-vulnerability-type-in-creator-lms-1-2-19  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-30. Updated: 2026-09-30  
License: CC BY 4.0 with a link back

CVE-2026-62083 · Severity: medium · CVSS 5.4 · Published 2026-09-30

Creator LMS is a WordPress plugin for learning management and course creation. A vulnerability in versions up to 1.2.19 allows subscribers to exploit an unspecified security weakness. The exact impact is unclear due to the vague vulnerability classification, but it has been assigned a CVSS score of 5.4 (medium severity).

Technologies: [Creator LMS](https://junglewise.ai/threats/technologies/creator-lms). Vendors: [Creator LMS](https://junglewise.ai/threats/vendors/creator-lms).

## Quick answers

**Is CVE-2026-62083 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-62083 being exploited in the wild.

**How severe is CVE-2026-62083?** Medium severity, with a CVSS score of 5.4, published 30 September 2026.

**Which products and versions are affected?** Creator LMS ≤1.2.19.

**Is there a fix for CVE-2026-62083?** A patch was published on 2026-09-30: Patch available in version 1.2.20 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-62083 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-62083?** Check whether you run Creator LMS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An uncategorized "other vulnerability type" exists in Creator LMS WordPress plugin versions ≤1.2.19, requiring subscriber-level privilege to exploit. The vulnerability advisory provides no details on the attack vector, vulnerable component, or specific technical nature of the flaw. A patch is available in version 1.2.20.

## Affected products

- Creator LMS Creator LMS ≤1.2.19

## Timeline

- 2026-09-30: disclosed: Published by Patchstack
- 2026-09-30: patched: Patch available in version 1.2.20

## References

- [https://wordpress.org/plugins](https://wordpress.org/plugins)
- [https://patchstack.com/database/wordpress/plugin/creatorlms/vulnerability/wordpress-creator-lms-plugin-1-2-19-other-vulnerability-type-vulnerability?_s_id=cve](https://patchstack.com/database/wordpress/plugin/creatorlms/vulnerability/wordpress-creator-lms-plugin-1-2-19-other-vulnerability-type-vulnerability?_s_id=cve)

## Related threats

- [Creator LMS arbitrary file upload in contributor functionality](https://junglewise.ai/threats/cve-2026-62129-contributor-arbitrary-file-upload-in-creator-lms-1-2-21-versions)
- [Creator LMS path traversal in contributor role](https://junglewise.ai/threats/cve-2026-97244-contributor-path-traversal-in-creator-lms-1-2-19-versions)