357 matches found
Uncanny Owl Tin Canny LearnDash Reporting Cross-Site Scripting Vulnerability
Uncanny Owl Tin Canny LearnDash Reporting is a plugin from Uncanny Owl Canada that provides learning record storage functionality for Wordpress. Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 has a security vulnerability that originates from the following script or parameter: searchkey GE...
WordPress LearnDash LMS premium plugin <= 3.1.5 - Unauthenticated SQL Injection (SQLi) vulnerability
Unauthenticated SQL Injection SQLi vulnerability discovered in WordPress LearnDash LMS premium plugin versions = 3.1.5. Solution Update the WordPress LearnDash LMS premium plugin to the latest available version at least 3.1.6...
LearnDash Plugin for WordPress < 3.1.6 SQL Injection
The WordPress LearnDash Plugin installed on the remote host is affected by a SQL Injection in the 'learndashgetcoursegroups' function in the ld-groups.php file due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queri...
WordPress Plugin LearnDash Detection
Binary data wordpresspluginlearndashdetect.nbin...
WordPress Plugin 'LearnDash' < 3.1.6 SQLi
The WordPress application running on the remote host has a version of the 'LearnDash' plugin that is prior to 3.1.6 and, thus, is affected by a SQL Injection SQLi exists in the 'learndashgetcoursegroups' function in the ld-groups.php file due to improper validation of user-supplied input. An...
Critical Bugs Found in 3 Popular e-Learning Plugins for WordPress Sites
Security researchers are sounding the alarm over newly discovered vulnerabilities in some popular online learning management system LMS plugins that various organizations and universities use to offer online training courses through their WordPress-based websites. According to the Check Point...
Critical Bugs Found in 3 Popular e-Learning Plugins for WordPress Sites
Security researchers are sounding the alarm over newly discovered vulnerabilities in some popular online learning management system LMS plugins that various organizations and universities use to offer online training courses through their WordPress-based websites. According to the Check Point...
WordPress LearnDash Plugin SQL Injection (CVE-2020-6009)
An SQL injection vulnerability exists in the WordPress LearnDash Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2020-6009
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection...
CVE-2020-6009
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection...
CVE-2020-6009
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection...
CVE-2020-6009
The CVE-2020-6009 entry concerns the LearnDash WordPress plugin and affects versions below 3.1.6. The vulnerability is an unauthenticated SQL injection in the ld-groups.php code path, where user-supplied input is not properly sanitized, enabling an attacker to craft SQL queries against the back-e...
CVE-2020-6009
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection...
LearnDash < 3.1.6 - Unauthenticated SQL Injection
The sfwd-lms WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability...
CVE-2020-6009: Improper Neutralization of Special Elements used in an SQL Command
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection...
PT-2020-18885
Name of the Vulnerable Software and Affected Versions LearnDash Wordpress plugin versions prior to 3.1.6 Description The issue concerns an Unauthenticated SQL Injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...
LearnDash WordPress LMS 3.1.2 Cross Site Scripting
Exploit Title: LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting Date: 2020-01-14 Vendor Homepage: https://www.learndash.com Vendor Changelog: https://learndash.releasenotes.io/release/uCskc-version-312 Exploit Author: Jinson Varghese Behanan Author Advisory:...
LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting
LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting Exploit Title: LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting Date: 2020-01-14 Vendor Homepage: https://www.learndash.com Vendor Changelog: https://learndash.releasenotes.io/release/uCskc-version-312...
WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting Vulnerability
Exploit for multiple platform in category web applications Exploit Title: LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting Vendor Homepage: https://www.learndash.com Vendor Changelog: https://learndash.releasenotes.io/release/uCskc-version-312 Exploit Author: Jinson Varghese...
WordPress Plugin LearnDash LMS 3.1.2 - Reflective Cross-Site Scripting
Exploit Title: LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting Date: 2020-01-14 Vendor Homepage: https://www.learndash.com Vendor Changelog: https://learndash.releasenotes.io/release/uCskc-version-312 Exploit Author: Jinson Varghese Behanan Author Advisory:...