WordPress LearnDash LMS - Reports Free plugin <= 1.8.2 - Missing Authorization to Plugin Settings Update vulnerability

WordPress LearnDash LMS - Reports Free plugin = 1.8.2 - Missing Authorization to Plugin Settings Update vulnerability discovered by Lucio Sá in WordPress Plugin LearnDash LMS – Reports versions = 1.8.2...

CVE-2024-5648

The LearnDash LMS – Reports plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions i.e. wrldsetconfiguration, wrldexcludesettingssave, applytimetrackingsettings, wpajaxwrldgutenbergblockvisit, etc.. in all versions up to, and...

CVE-2024-5648

The LearnDash LMS – Reports plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions i.e. wrldsetconfiguration, wrldexcludesettingssave, applytimetrackingsettings, wpajaxwrldgutenbergblockvisit, etc.. in all versions up to, and...

CVE-2024-5648 LearnDash LMS - Reports Free <= 1.8.2 - Missing Authorization to Plugin Settings Update

The LearnDash LMS – Reports plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.8.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2024-5648

CVE-2024-5648: LearnDash LMS – Reports (WordPress) up to v1.8.2 allows authenticated users with Subscriber+ to modify plugin settings due to a missing capability check; CVSS v3.1 base score 5.4 (Medium). Public technical details beyond this (fix/patch) are not provided in the connected documents.

CVE-2024-5648 LearnDash LMS - Reports Free <= 1.8.2.1 - Missing Authorization to Plugin Settings Update

The LearnDash LMS – Reports plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions i.e. wrldsetconfiguration, wrldexcludesettingssave, applytimetrackingsettings, wpajaxwrldgutenbergblockvisit, etc.. in all versions up to, and...

PT-2024-36820 · WordPress · Learndash Lms – Reports

Name of the Vulnerable Software and Affected Versions: LearnDash LMS – Reports plugin for WordPress versions up to, and including, 1.8.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to update various plugin settings due to a missing capability check...

WordPress plugin LearnDash LMS security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

WordPress LearnDash LMS – Reports Plugin <= 1.8.2 is vulnerable to Broken Access Control

Software LearnDash LMS – Reports Type Plugin Vulnerable versions = 1.8.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5648 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 36a198e999f6 Credits Lucio Sá Required...

WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability

Subscriber+ Arbitrary Post/Page Duplication vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Uncanny Toolkit Pro for LearnDash versions 4.1.4.1...

WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Uncanny Toolkit Pro for LearnDash versions 4.1.4.1...

WordPress Uncanny Toolkit Pro for LearnDash Plugin < 4.1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Uncanny Toolkit Pro for LearnDash Type Plugin Vulnerable versions 4.1.4.1 Fixed in 4.1.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37436 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 95db5389fd59 Credits Dave Jong...

WordPress Uncanny Toolkit Pro for LearnDash Plugin < 4.1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Uncanny Toolkit Pro for LearnDash Type Plugin Vulnerable versions 4.1.4.1 Fixed in 4.1.4.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37438 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 50225361075a Credits...

WordPress Uncanny Toolkit Pro for LearnDash Plugin < 4.1.4.1 is vulnerable to Other Vulnerability Type

Software Uncanny Toolkit Pro for LearnDash Type Plugin Vulnerable versions 4.1.4.1 Fixed in 4.1.4.1 OWASP Top 10 A1: Broken Access Control Classification Other Vulnerability Type CVE CVE-2024-37439 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e91e3a155b54 Credits Dave...

CVE-2023-34020

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3...

CVE-2023-34020 WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3...

CVE-2023-34020

CVE-2023-34020: Open Redirect in Uncanny Toolkit for LearnDash affecting releases

WordPress Plugin Uncanny Toolkit for LearnDash 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

The vulnerability of the LearnDash plugin’s interface in the WordPress content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the LearnDash plugin’s interface in the WordPress content management system is related to insufficient protection of operational data during the processing of the sfwd-question and ld-exam endpoints. Exploiting this vulnerability can allow an attacker, operating remotely, to...

The vulnerability of the LearnDash plugin’s interface in the WordPress content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the LearnDash plugin’s interface in the WordPress content management system is related to insufficient protection of operational data during the processing of the sfwd-question and ld-exam endpoints. Exploiting this vulnerability can allow an attacker, operating remotely, to...