Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Learndash HIGH 7.5
CVE-2024-56940

An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file uploads.

Mitigation only
Fix from $1,950 2025-02-12
Learndash MEDIUM 5.4
CVE-2024-56938

LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class.

No fix yet
Fix from $1,600 2025-02-12
Learndash MEDIUM 5.4
CVE-2024-56939

LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class.

No fix yet
Fix from $1,600 2025-02-12
Learndash MEDIUM 5.3
CVE-2024-1209

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file a…

Fix: 4.10.3+
Fix from $1,600 2024-02-05
Learndash MEDIUM 5.3
CVE-2024-1210

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This mak…

Fix: 4.10.2+
Fix from $1,600 2024-02-05
Learndash MEDIUM 5.3
CVE-2024-1208EPSS 5%

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This mak…

Fix: 4.10.3+
Fix from $1,600 2024-02-05
Learndash HIGH 8.8
CVE-2023-28777

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LearnDash LearnDash LMS allows SQL Injection.Th…

Fix: after 4.5.3
Fix from $1,950 2023-10-31
Learndash HIGH 8.8
CVE-2023-3105

The LearnDash LMS plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 4.6.0. This is due to the…

Fix: after 4.6.0
Fix from $1,950 2023-07-12
Learndash HIGH 7.5
CVE-2018-25019

The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploaded in the learndash_assignment…

Fix: after 2.5.4
Fix from $1,950 2021-11-01
Learndash CRITICAL 9.8
CVE-2020-6009

LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.

Fix: 3.1.6+
Fix from $2,300 2020-04-01
Learndash MEDIUM 5.4
CVE-2020-7108

The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.

Fix: 3.1.2+
Fix from $1,600 2020-01-16