Lucene search
WpvulndbWPVDB-ID:F813A21D-7A6A-4FF4-A43C-3E2991A23C7FHistoryFeb 02, 2024 - 12:00 a.m.
LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments
2024-02-0200:00:00
wpscan.com
9
learndash lms
wordpress
sensitive information exposure
Description The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 4.10.2 |
Related
prion
prion
Design/Logic Flaw
2024-02-05 22:16:00
nvd
nvd
CVE-2024-1209
2024-02-05 22:16:08
nuclei
nuclei
LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments
2024-02-20 18:32:09
cve
cve
CVE-2024-1209
2024-02-05 22:16:08
cvelist
cvelist
CVE-2024-1209
2024-02-05 21:21:48
wordfence
wordfence
6.7 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.3%
Related for WPVDB-ID:F813A21D-7A6A-4FF4-A43C-3E2991A23C7F