Skip to content
Learndash vulnerabilities
Newest
-
learndash memberdash
MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter
CVE-2026-16310
9.8 Critical
-
learndash
An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a...
CVE-2024-56940
7.5 High
-
learndash
LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in...
CVE-2024-56939
5.4 Medium
-
learndash
LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in...
CVE-2024-56938
5.4 Medium
-
learndash lms, stellarwp learndash lms +1 more
WordPress LearnDash LMS Plugin <= 4.20.0.1 - Broken Access Control vulnerability
CVE-2025-24662
5.3 Medium
-
learndash, stellarwp learndash lms +1 more
LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
CVE-2024-1208
Public exploit
5.3 Medium
-
learndash, stellarwp learndash lms +1 more
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
CVE-2024-1209
Public exploit
5.3 Medium
-
learndash, stellarwp learndash lms +1 more
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
CVE-2024-1210
5.3 Medium
-
learndash, learndash lms, stellarwp learndash lms +2 more
WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection
CVE-2023-28777
8.5 High
-
learndash, stellarwp learndash lms +1 more
LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
CVE-2023-3105
8.8 High
-
learndash, stellarwp learndash lms +1 more
LearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload
CVE-2018-25019
7.5 High
-
learndash
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.
CVE-2020-6009
9.8 Critical
-
learndash
The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.
CVE-2020-7108
Public exploit
5.4 Medium