Hookandhook Wp Courses Lms vulnerabilities

• hookandhook wp courses lms – online courses builder, elearning courses, courses solution, education courses WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter CVE-2026-10630 4.3 MediumAugust 25, 2026
• hookandhook wp courses lms WordPress WP Courses LMS plugin <= 3.2.26 - Cross Site Scripting (XSS) vulnerability CVE-2026-31914 6.5 MediumMarch 25, 2026
• hookandhook wp courses lms – online courses builder, elearning courses, courses solution, education courses WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update CVE-2024-12172 Public exploit 7.5 HighDecember 12, 2024
• hookandhook wp courses lms WP Courses LMS < 2.0.44 - Authenticated Stored XSS via Video Embed Code CVE-2021-24621 4.8 MediumSeptember 13, 2021