Login Request a demo
LE
Product
Learndash
by Learndash · last CVE Feb 12, 2025
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 4Medium 6Low 0
Severity
All severities11Critical1High4Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Learndash to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-6009
9.8
2%
Apr 1
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection
Affected: before 3.1.6
CVE-2023-28777
8.8
1%
Oct 31
WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection
Affected: through 4.5.3
CVE-2023-3105
8.8
2%
Jul 12
LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Affected: through 4.6.0
CVE-2024-56940
7.5
1%
Feb 12
An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file uploads
Affected: 6.7.1
CVE-2018-25019
7.5
2%
Nov 1
LearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload
Affected: through 2.5.4
CVE-2024-56938
5.4
0%
Feb 12
LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class
Affected: 6.7.1
CVE-2024-56939
5.4
0%
Feb 12
LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class
Affected: 6.7.1
CVE-2020-7108
5.4
3%
Jan 16
The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field
Affected: 3.0 before 3.1.2
CVE-2024-1208
5.3
5%
Feb 5
LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
Affected: before 4.10.3
CVE-2024-1209
5.3
2%
Feb 5
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
Affected: before 4.10.3
CVE-2024-1210
5.3
2%
Feb 5
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
Affected: before 4.10.2
Showing 11