Lucene search

K
wpvulndbWpvulndbWPVDB-ID:585F45C4-2D43-48C2-956E-17059FC6B2D1
HistoryFeb 02, 2024 - 12:00 a.m.

LearnDash LMS < 4.10.3 - Sensitive Information Exposure via API

2024-02-0200:00:00
wpscan.com
6
learndash
vulnerable
sensitive information
exposure
wordpress
quiz questions
unauthenticated attackers

7 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.4%

Description The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.

CPENameOperatorVersion
eq4.10.3

7 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.4%

Related for WPVDB-ID:585F45C4-2D43-48C2-956E-17059FC6B2D1