LL
Product
LearnDash LMS
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add LearnDash LMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3105 | 8.8 | Jul 12 | LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change Affected: through 4.6.0 |
| CVE-2026-12483 | 7.5 | Sep 4 | LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler Affected: through 5.1.5 |
| CVE-2026-3079 | 6.5 | Mar 24 | LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter Affected: through 5.0.3 |
| CVE-2026-12843 | 5.4 | Sep 5 | LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint Affected: 4.25.0 through 5.1.6 |
| CVE-2024-1208 | 5.3 | Feb 5 | LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API Affected: through 4.10.2 |
| CVE-2024-1209 | 5.3 | Feb 5 | LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments Affected: through 4.10.1 |
| CVE-2024-1210 | 5.3 | Feb 5 | LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API Affected: through 4.10.1 |
Showing 7