Lucene search
+L

310 matches found

Nuclei
Nuclei
added 2026/09/13 4:24 p.m.147 views

LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads. id:...

5.3CVSS6.6AI score0.02399EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.184 views

LearnDash LMS < 4.10.2 - Sensitive Information Exposure

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes. id: CVE-2024-1210 info: name: LearnDash LMS 4.10.2 - Sensitive Information...

5.3CVSS6.3AI score0.05285EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.86 views

Uncanny Toolkit for LearnDash - Open Redirection

A vulnerability in the WordPress Uncanny Toolkit for LearnDash Plugin allowed malicious actors to redirect users, posing a potential risk of phishing incidents. The issue has been resolved in version 3.6.4.4, and users are urged to update for security. id: CVE-2023-34020 info: name: Uncanny Toolk...

6.1CVSS7.7AI score0.00963EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.127 views

LearnDash LMS < 4.10.3 - Sensitive Information Exposure

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions. id: CVE-2024-1208 info: name: LearnDash LMS 4.10.3 - Sensitive...

5.3CVSS6.3AI score0.05285EPSS
SaveExploits3References5
Kitploit
Kitploit
added 2026/09/13 3:40 p.m.9 views

CVE-2024-1208-and-CVE-2024-1210

CVE-2024-1208 y CVE-2024-1210 Exposición de Información Sensible a través de API en LearnDash. Visitantes no autenticados pueden navegar por los cuestionarios y las preguntas de los cuestionarios sin estar inscritos en un curso conectado. Vulnerabilidad: CVE-2024-1208 y CVE-2024-1210 Exposición d...

5.3CVSS6.6AI score0.05285EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 11:28 a.m.5 views

CVE-2024-8349-and-CVE-2024-8350

CVE-2024-8349 和 CVE-2024-8350 背景信息 Uncanny Groups for LearnDash uncanny-learndash-group 是 LearnDash LMS sfwd-lms 的第三方插件。该插件允许 Group Leaders(自定义 LearnDash 角色)在前端管理自己 LearnDash 分组的用户。 Group Leaders 可以将现有用户添加到他们的分组中。现有用户会被自动添加(即无需接受任何邀请)。 如果站点管理员启用了名为“Allow group leaders to edit...

7.2CVSS5.8AI score0.01164EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 9:04 a.m.5 views

CVE-2024-1209

CVE-2024-1209 Exposición de información sensible mediante assignments en LearnDash. Los visitantes no autenticados pueden explorar y descargar los assignments subidos. Vulnerabilidad: CVE-2024-1209 Exposición de información sensible mediante assignments CVSS: 5.3 Media Software: LearnDash sfwd-lm...

5.3CVSS6.6AI score0.02399EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 2:48 a.m.5 views

LearnDash

LearnDash Sqli LearnDash = 4.25.6 - Inyección SQL Admin+ Descripción El complemento de WordPress LearnDash con versión inferior a 4.25.6 es vulnerable a inyección SQL Admin+. Detalles Tipo : plugin Slug : sfwd-lms Versión afectada : Puntuación CVSS : 9.8 Gravedad CVSS : Crítica Vector CVSS :...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:33 a.m.6 views

CVE-2023-6567-poc

CVE-2023-6567-poc Time-based SQLi Description The plugin does not properly sanitise and escape the orderby parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users 1. Vulnerable GET request:...

9.8CVSS7.6AI score0.51394EPSS
SaveExploits1
NVD
NVD
added 2026/09/05 12:16 p.m.7 views

CVE-2026-12843

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...

5.4CVSS0.00164EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/05 11:28 a.m.38 views

CVE-2026-12843 LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...

5.4CVSS0.00164EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/05 11:28 a.m.7 views

EUVD-2026-71990

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...

5.4CVSS5.5AI score0.00164EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/05 11:28 a.m.29 views

CVE-2026-12843

The LearnDash LMS WordPress plugin is affected by an authorization bypass in versions 4.25.0 through 5.1.6 , caused by improper verification of user authorization via a REST endpoint. Unauthenticated attackers can enroll arbitrary users in paid courses without payment verification, effectively by...

5.4CVSS5.5AI score0.00164EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/09/05 8:15 a.m.7 views

WordPress LearnDash LMS plugin 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint vulnerability

WordPress LearnDash LMS plugin 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint vulnerability discovered by Applied Cybernetics in WordPress Plugin LearnDash LMS versions 4.25.0-5.1.6...

5.4CVSS5.2AI score0.00164EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/09/04 2:17 p.m.5 views

CVE-2026-12483

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndashfileuploadprocess' function, which iterates through an entire array and validates only the first file. This...

7.5CVSS0.00382EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/04 1:29 p.m.7 views

EUVD-2026-71098

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndashfileuploadprocess' function, which iterates through an entire array and validates only the first file. This...

7.5CVSS5.9AI score0.00382EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/04 1:29 p.m.34 views

CVE-2026-12483 LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndashfileuploadprocess' function, which iterates through an entire array and validates only the first file. This...

7.5CVSS0.00382EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/04 1:29 p.m.24 views

CVE-2026-12483

The LearnDash LMS plugin for WordPress (versions ≤ 5.1.5 ) is vulnerable to an Unrestricted File Type Upload caused by insufficient input validation in the learndash_fileupload_process function, which validates only the first file in a multi-file array. Authenticated users with subscriber-level a...

7.5CVSS5.9AI score0.00382EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/09/04 7:37 a.m.6 views

WordPress LearnDash LMS plugin <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Nguyen Ngoc Duc duc193 in WordPress Plugin LearnDash LMS versions = 5.1.5...

7.5CVSS5.2AI score0.00382EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 7:55 a.m.12 views

CVE-2026-13450

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.9.4 via the 'access' parameter due to missing validation on a user controlled key. This...

5.3CVSS5.9AI score0.00719EPSS
SaveExploits0References15
Rows per page
Query Builder