Записи LearnDash
11 опубликованных записей вендора learndash.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 0
- С записью об исправлении
- 9,1 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-400 Uncontrolled Resource Consumption1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
11 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
40В плане | CVE-2020-6009Эксплойта нет | LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.learndash · learndash · CWE-89 | Критическая9,8 | — | 1,8 % | 1 апр. 2020 г. |
36Наблюдать | CVE-2023-3105Эксплойта нет | LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Changelearndash · learndash · CWE-639 | Высокая8,8 | — | 2,2 % | 12 июл. 2023 г. |
35Наблюдать | CVE-2023-28777Эксплойта нет | WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injectionlearndash · learndash · CWE-89 | Высокая8,8 | — | 0,7 % | 31 окт. 2023 г. |
30Наблюдать | CVE-2018-25019Эксплойта нет | LearnDash < 2.5.4 - Unauthenticated Arbitrary File Uploadlearndash · learndash · CWE-434 | Высокая7,5 | — | 1,6 % | 1 нояб. 2021 г. |
30Наблюдать | CVE-2024-56940Эксплойта нет | An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file upllearndash · learndash · CWE-400 | Высокая7,5 | — | 0,6 % | 12 февр. 2025 г. |
23Наблюдать | CVE-2024-1208Proof of concept | LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via APIlearndash · learndash · CWE-200 | Средняя5,3 | — | 5,3 % | 5 февр. 2024 г. |
22Наблюдать | CVE-2020-7108Proof of concept | The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.learndash · learndash · CWE-79 | Средняя5,4 | — | 3,5 % | 16 янв. 2020 г. |
22Наблюдать | CVE-2024-1209Proof of concept | LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignmentslearndash · learndash · CWE-200 | Средняя5,3 | — | 2,4 % | 5 февр. 2024 г. |
22Наблюдать | CVE-2024-1210Proof of concept | LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via APIlearndash · learndash · CWE-200 | Средняя5,3 | — | 2,0 % | 5 февр. 2024 г. |
21Наблюдать | CVE-2024-56938Эксплойта нет | LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class.learndash · learndash · CWE-79 | Средняя5,4 | — | 0,3 % | 12 февр. 2025 г. |
21Наблюдать | CVE-2024-56939Эксплойта нет | LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class.learndash · learndash · CWE-79 | Средняя5,4 | — | 0,3 % | 12 февр. 2025 г. |
- CVE-2020-600940В плане
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %learndash · learndash1 апр. 2020 г.
- CVE-2023-310536Наблюдать
LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %learndash · learndash12 июл. 2023 г.
- CVE-2023-2877735Наблюдать
WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %learndash · learndash31 окт. 2023 г.
- CVE-2018-2501930Наблюдать
LearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %learndash · learndash1 нояб. 2021 г.
- CVE-2024-5694030Наблюдать
An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file upl
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %learndash · learndash12 февр. 2025 г.
- CVE-2024-120823Наблюдать
LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
СредняяCVSS 5,3Proof of conceptEPSS 5 %learndash · learndash5 февр. 2024 г.
- CVE-2020-710822Наблюдать
The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.
СредняяCVSS 5,4Proof of conceptEPSS 3 %learndash · learndash16 янв. 2020 г.
- CVE-2024-120922Наблюдать
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
СредняяCVSS 5,3Proof of conceptEPSS 2 %learndash · learndash5 февр. 2024 г.
- CVE-2024-121022Наблюдать
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
СредняяCVSS 5,3Proof of conceptEPSS 2 %learndash · learndash5 февр. 2024 г.
- CVE-2024-5693821Наблюдать
LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class.
СредняяCVSS 5,4Эксплойта нетEPSS 0 %learndash · learndash12 февр. 2025 г.
- CVE-2024-5693921Наблюдать
LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class.
СредняяCVSS 5,4Эксплойта нетEPSS 0 %learndash · learndash12 февр. 2025 г.