LearnDash kayıtları
learndash üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %9,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-400 Uncontrolled Resource Consumption1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-6009İstismar yok | LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.learndash · learndash · CWE-89 | Kritik9,8 | — | %1,8 | 1 Nis 2020 |
36İzleyin | CVE-2023-3105İstismar yok | LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Changelearndash · learndash · CWE-639 | Yüksek8,8 | — | %2,2 | 12 Tem 2023 |
35İzleyin | CVE-2023-28777İstismar yok | WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injectionlearndash · learndash · CWE-89 | Yüksek8,8 | — | %0,7 | 31 Eki 2023 |
30İzleyin | CVE-2018-25019İstismar yok | LearnDash < 2.5.4 - Unauthenticated Arbitrary File Uploadlearndash · learndash · CWE-434 | Yüksek7,5 | — | %1,6 | 1 Kas 2021 |
30İzleyin | CVE-2024-56940İstismar yok | An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file upllearndash · learndash · CWE-400 | Yüksek7,5 | — | %0,6 | 12 Şub 2025 |
23İzleyin | CVE-2024-1208Kavram kanıtı | LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via APIlearndash · learndash · CWE-200 | Orta5,3 | — | %5,3 | 5 Şub 2024 |
22İzleyin | CVE-2020-7108Kavram kanıtı | The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.learndash · learndash · CWE-79 | Orta5,4 | — | %3,5 | 16 Oca 2020 |
22İzleyin | CVE-2024-1209Kavram kanıtı | LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignmentslearndash · learndash · CWE-200 | Orta5,3 | — | %2,4 | 5 Şub 2024 |
22İzleyin | CVE-2024-1210Kavram kanıtı | LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via APIlearndash · learndash · CWE-200 | Orta5,3 | — | %2,0 | 5 Şub 2024 |
21İzleyin | CVE-2024-56938İstismar yok | LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class.learndash · learndash · CWE-79 | Orta5,4 | — | %0,3 | 12 Şub 2025 |
21İzleyin | CVE-2024-56939İstismar yok | LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class.learndash · learndash · CWE-79 | Orta5,4 | — | %0,3 | 12 Şub 2025 |
- CVE-2020-600940Planlayın
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.
KritikCVSS 9,8İstismar yokEPSS %2learndash · learndash1 Nis 2020
- CVE-2023-310536İzleyin
LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
YüksekCVSS 8,8İstismar yokEPSS %2learndash · learndash12 Tem 2023
- CVE-2023-2877735İzleyin
WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %1learndash · learndash31 Eki 2023
- CVE-2018-2501930İzleyin
LearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload
YüksekCVSS 7,5İstismar yokEPSS %2learndash · learndash1 Kas 2021
- CVE-2024-5694030İzleyin
An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file upl
YüksekCVSS 7,5İstismar yokEPSS %1learndash · learndash12 Şub 2025
- CVE-2024-120823İzleyin
LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
OrtaCVSS 5,3Kavram kanıtıEPSS %5learndash · learndash5 Şub 2024
- CVE-2020-710822İzleyin
The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.
OrtaCVSS 5,4Kavram kanıtıEPSS %3learndash · learndash16 Oca 2020
- CVE-2024-120922İzleyin
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
OrtaCVSS 5,3Kavram kanıtıEPSS %2learndash · learndash5 Şub 2024
- CVE-2024-121022İzleyin
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
OrtaCVSS 5,3Kavram kanıtıEPSS %2learndash · learndash5 Şub 2024
- CVE-2024-5693821İzleyin
LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class.
OrtaCVSS 5,4İstismar yokEPSS %0learndash · learndash12 Şub 2025
- CVE-2024-5693921İzleyin
LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class.
OrtaCVSS 5,4İstismar yokEPSS %0learndash · learndash12 Şub 2025