CVE-2024-1209

CVE-2024-1209 LearnDashにおける課題経由の機密情報漏洩。認証されていない訪問者はアップロードされた課題を閲覧・ダウンロードできます。 脆弱性: CVE-2024-1209 課題経由の機密情報漏洩 CVSS: 5.3 Medium ソフトウェア: LearnDash sfwd-lms 影響を受けるバージョン: = 4.10.1 パッチ適用済みバージョン: 4.10.2 部分的に, 4.10.3 完全に 開発者: LearnDash 研究者: Karl Emil Nikka, Nikka Systems 公開日: 2024-02-05 最終更新日: 2024-02-05...

CVE-2024-8349-and-CVE-2024-8350

CVE-2024-8349 및 CVE-2024-8350 배경 정보 Uncanny Groups for LearnDash uncanny-learndash-group는 LearnDash LMS sfwd-lms용 타사 플러그인입니다. 이 플러그인은 그룹 리더사용자 정의 LearnDash 역할가 프론트엔드에서 자신의 LearnDash 그룹 사용자를 관리할 수 있게 해줍니다. 그룹 리더는 기존 사용자를 자신의 그룹에 추가할 수 있습니다. 기존 사용자는 자동으로 추가됩니다초대를 수락할 필요가 없습니다. 사이트 관리자가 '그룹 리더가 사용자를...

CVE-2024-1208-and-CVE-2024-1210

CVE-2024-1208 및 CVE-2024-1210 LearnDash API를 통한 민감한 정보 노출. 인증되지 않은 방문자는 연결된 과정에 등록하지 않고도 퀴즈와 퀴즈 문제를 열람할 수 있습니다. 취약점: CVE-2024-1208 및 CVE-2024-1210 API를 통한 민감한 정보 노출 CVSS: 5.3 중간 소프트웨어: LearnDash sfwd-lms 영향을 받는 버전: = 4.10.2 패치 버전: 4.10.3 개발자: LearnDash 연구자: Karl Emil Nikka, Nikka Systems 공개 발표일:...

LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads. id:...

Uncanny Toolkit for LearnDash - Open Redirection

A vulnerability in the WordPress Uncanny Toolkit for LearnDash Plugin allowed malicious actors to redirect users, posing a potential risk of phishing incidents. The issue has been resolved in version 3.6.4.4, and users are urged to update for security. id: CVE-2023-34020 info: name: Uncanny Toolk...

LearnDash LMS < 4.10.2 - Sensitive Information Exposure

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes. id: CVE-2024-1210 info: name: LearnDash LMS 4.10.2 - Sensitive Information...

LearnDash LMS < 4.10.3 - Sensitive Information Exposure

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions. id: CVE-2024-1208 info: name: LearnDash LMS 4.10.3 - Sensitive...

LearnDash

LearnDash Sqli LearnDash = 4.25.6 - Admin+ SQL 인젝션 설명 4.25.6 미만 버전의 LearnDash Wordpress 플러그인은 Admin+ SQL 인젝션에 취약합니다. 세부 정보 유형 : plugin 슬러그 : sfwd-lms 영향받는 버전 : CVSS 점수 : 9.8 CVSS 등급 : 심각 CVSS 벡터 : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H POC sqlmap -u...

CVE-2023-6567-poc

CVE-2023-6567-poc 時間ベースSQLi 説明 このプラグインは、SQL文で使用する前にorderbyパラメータを適切にサニタイズおよびエスケープしないため、認証されていないユーザーによって悪用可能なSQLインジェクションが発生します。 1. 脆弱なGETリクエスト: https://vulnerablewordpress.com/wp-json/lp/v1/courses/archive-course?csearch=test&orderby=ID&order=DESC&limit=10&returntype=html 2. GETリクエストを保存する 3. sqlmap...

CVE-2026-12843

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...

CVE-2026-12843 LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...

CVE-2026-12843 LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...

CVE-2026-12843

The LearnDash LMS WordPress plugin is affected by an authorization bypass in versions 4.25.0 through 5.1.6 , caused by improper verification of user authorization via a REST endpoint. Unauthenticated attackers can enroll arbitrary users in paid courses without payment verification, effectively by...

EUVD-2026-71990

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...

WordPress LearnDash LMS plugin 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint vulnerability

WordPress LearnDash LMS plugin 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint vulnerability discovered by Applied Cybernetics in WordPress Plugin LearnDash LMS versions 4.25.0-5.1.6...

PT-2026-86407

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...

CVE-2026-12843: Missing Authorization

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...

CVE-2026-12483

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndashfileuploadprocess' function, which iterates through an entire array and validates only the first file. This...

CVE-2026-12483 LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndashfileuploadprocess' function, which iterates through an entire array and validates only the first file. This...

EUVD-2026-71098

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndashfileuploadprocess' function, which iterates through an entire array and validates only the first file. This...