LL
Product
LearnDash LMS
by StellarWP · last CVE Sep 5, 2026
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch

Add LearnDash LMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3079
6.5
0%
Mar 24
LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter
Affected: through 5.0.3
CVE-2026-12843
5.4
0%
Sep 5
LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint
Affected: 4.25.0 through 5.1.6
CVE-2024-1208
5.3
5%
Feb 5
LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
Affected: through 4.10.2
CVE-2024-1209
5.3
2%
Feb 5
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
Affected: through 4.10.1
CVE-2024-1210
5.3
2%
Feb 5
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
Affected: through 4.10.1
Showing 5