Lucene search
+L

294 matches found

OSV
OSV
added 2024/02/05 10:16 p.m.4 views

CVE-2024-1210

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes...

5.3CVSS7.3AI score0.05285EPSS
SaveExploits3References3
NVD
NVD
added 2024/02/05 10:16 p.m.21 views

CVE-2024-1210

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes...

5.3CVSS5.1AI score0.02027EPSS
SaveExploits3References3
OSV
OSV
added 2024/02/05 10:16 p.m.6 views

CVE-2024-1209

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads...

5.3CVSS7.3AI score0.02419EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/05 10:16 p.m.6 views

CVE-2024-1208

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions...

5.3CVSS5.8AI score0.05285EPSS
SaveExploits3References3
NVD
NVD
added 2024/02/05 10:16 p.m.20 views

CVE-2024-1208

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions...

5.3CVSS5.1AI score0.05285EPSS
SaveExploits2References3
Prion
Prion
added 2024/02/05 10:16 p.m.22 views

Design/Logic Flaw

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions...

5CVSS7AI score0.05285EPSS
SaveExploits3References3Affected Software1
Prion
Prion
added 2024/02/05 10:16 p.m.23 views

Design/Logic Flaw

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads...

5CVSS7AI score0.02419EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2024/02/05 10:16 p.m.32 views

Design/Logic Flaw

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes...

5CVSS7AI score0.05285EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2024/02/05 9:21 p.m.138 views

CVE-2024-1208

The CVE-2024-1208 family concerns the LearnDash LMS WordPress plugin. Affected: LearnDash LMS plugin for WordPress; vulnerability: Sensitive Information Exposure via the API that could allow unauthenticated access to quiz questions. Documented impact includes access to quiz questions and related ...

5.3CVSS6AI score0.05285EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2024/02/05 9:21 p.m.48 views

CVE-2024-1208 LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions...

5.3CVSS5.4AI score0.05285EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2024/02/05 9:21 p.m.18 views

CVE-2024-1208 LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions...

5.3CVSS6.4AI score0.05285EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2024/02/05 9:21 p.m.32 views

CVE-2024-1209 LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads...

5.3CVSS5.4AI score0.02419EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/02/05 9:21 p.m.5 views

CVE-2024-1209

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads...

5.3CVSS9.5AI score0.02419EPSS
SaveExploits1References3
CVE
CVE
added 2024/02/05 9:21 p.m.87 views

CVE-2024-1209

CVE-2024-1209 affects LearnDash LMS for WordPress. Affected versions are all releases up to and including 4.10.1, where direct file access and insufficient protection of uploaded assignments allow unauthenticated access to sensitive uploads, constituting Sensitive Information Exposure. The issue ...

5.3CVSS6.1AI score0.02419EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2024/02/05 9:21 p.m.120 views

CVE-2024-1210

CVE-2024-1210 concerns the LearnDash LMS WordPress plugin. The connected documents specify a Sensitive Information Exposure vulnerability in LearnDash where, in all versions up to and including 4.10.1 (via API), unauthenticated attackers can obtain access to quizzes. The vulnerability affects the...

5.3CVSS6AI score0.05285EPSS
SaveExploits3References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/05 9:21 p.m.2 views

CVE-2024-1210 LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes...

5.3CVSS6.4AI score0.05285EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.10 views

WordPress Plugin LearnDash LMS Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

5.3CVSS6.6AI score0.05285EPSS
SaveExploits3References4
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.6 views

WordPress Plugin LearnDash LMS Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.7AI score0.02419EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2024/02/05 12:0 a.m.10 views

WordPress LearnDash LMS Plugin <= 4.10.1 is vulnerable to Sensitive Data Exposure

Software LearnDash LMS Type Plugin Vulnerable versions = 4.10.1 Fixed in 4.10.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1209 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b49f2746f70f Credits Karl Emil Nikka Required...

5.3CVSS6.5AI score0.02419EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2024/02/05 12:0 a.m.12 views

WordPress LearnDash LMS Plugin <= 4.10.1 is vulnerable to Sensitive Data Exposure

Software LearnDash LMS Type Plugin Vulnerable versions = 4.10.1 Fixed in 4.10.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1210 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID eac39e71b914 Credits Karl Emil Nikka Required...

5.3CVSS6.5AI score0.02027EPSS
SaveExploits3References2Affected Software1
Rows per page
Query Builder