Known vulnerabilities in StellarWP LearnDash LMS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-12843 | The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6 | 5.4 Medium | Sep 5, 2026 |
| CVE-2026-12483 | The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including… | 7.5 High | Sep 4, 2026 |
| CVE-2026-3079 | The LearnDash LMS plugin for WordPress is vulnerable to blind time-based SQL Injection via the… | 6.5 Medium | Mar 24, 2026 |
| CVE-2024-1208 | The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… | 5.3 Medium | Feb 5, 2024 |
| CVE-2024-1209 | The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… | 5.3 Medium | Feb 5, 2024 |
| CVE-2024-1210 | The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… | 5.3 Medium | Feb 5, 2024 |
| CVE-2023-3105 | The LearnDash LMS plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and… | 8.8 High | Jul 12, 2023 |
Other StellarWP products
GiveWP – Donation Plugin and Fundraising Platform 34
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 30
The Events Calendar 21
GiveWP 10
Event Tickets and Registration 8
Membership Plugin – Restrict Content 7
WPComplete 4
Kadence WooCommerce Email Designer 4
Bookit — Booking & Appointment Calendar 3
Gutenberg Blocks by Kadence Blocks 3
Event Tickets 3
Restrict Content 2