5.3
Moyenne
CVE-2024-1209 The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…
Description
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| LearnDash LMS 4.10 | premières → 4.10.1 | Pas de correctif indiqué |
| LearnDash LMS 4.10 | premières → 4.10.1 | Pas de correctif indiqué |
Autres CVE de LearnDash LMS
Les 4 CVE de LearnDash LMS →
CVE-2024-1208
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…
5.3
Moyenne
CVE-2024-1210
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…
5.3
Moyenne
CVE-2023-3105
The LearnDash LMS plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and…
8.8
Élevée