LE
Vendor
Learndash
14
CVEs
0
On KEV
0
New 30D
Products
LE9.8
Learndash
Learndash
11 CVEs0 on KEV0 new
LL8.8
LearnDash LMS
LearnDash
2 CVEs0 on KEV0 new
ME9.8
MemberDash
LearnDash
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-16310 | ME MemberDash LearnDash | 9.8 | Sep 6 | MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter |
| CVE-2024-56940 | LE Learndash Learndash | 7.5 | Feb 12 | An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file uploads |
| CVE-2024-56939 | LE Learndash Learndash | 5.4 | Feb 12 | LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class |
| CVE-2024-56938 | LE Learndash Learndash | 5.4 | Feb 12 | LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class |
| CVE-2025-24662 | LL LearnDash LMS LearnDash | 5.3 | Jan 27 | WordPress LearnDash LMS Plugin <= 4.20.0.1 - Broken Access Control vulnerability |
| CVE-2024-1208 | LE Learndash Learndash | 5.3 | Feb 5 | LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API |
| CVE-2024-1209 | LE Learndash Learndash | 5.3 | Feb 5 | LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments |
| CVE-2024-1210 | LE Learndash Learndash | 5.3 | Feb 5 | LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API |
| CVE-2023-28777 | LL LearnDash LMS LearnDash | 8.8 | Oct 31 | WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection |
| CVE-2023-3105 | LE Learndash Learndash | 8.8 | Jul 12 | LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change |
| CVE-2018-25019 | LE Learndash Learndash | 7.5 | Nov 1 | LearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload |
| CVE-2020-6009 | LE Learndash Learndash | 9.8 | Apr 1 | LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection |
| CVE-2020-7108 | LE Learndash Learndash | 5.4 | Jan 16 | The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field |