Skip to content
Stellarwp Learndash Lms vulnerabilities
-
stellarwp learndash lms
LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint
CVE-2026-12843
5.4 Medium
-
stellarwp learndash lms
LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler
CVE-2026-12483
7.5 High
-
stellarwp learndash lms
LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter
CVE-2026-3079
6.5 Medium
-
learndash lms, stellarwp learndash lms +1 more
WordPress LearnDash LMS Plugin <= 4.20.0.1 - Broken Access Control vulnerability
CVE-2025-24662
5.3 Medium
-
stellarwp learndash lms – reports
LearnDash LMS - Reports Free <= 1.8.2.1 - Missing Authorization to Plugin Settings Update
CVE-2024-5648
5.4 Medium
-
learndash, stellarwp learndash lms +1 more
LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
CVE-2024-1208
Public exploit
5.3 Medium
-
learndash, stellarwp learndash lms +1 more
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
CVE-2024-1209
Public exploit
5.3 Medium
-
learndash, stellarwp learndash lms +1 more
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
CVE-2024-1210
5.3 Medium
-
learndash, learndash lms, stellarwp learndash lms +2 more
WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection
CVE-2023-28777
8.5 High
-
learndash, stellarwp learndash lms +1 more
LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
CVE-2023-3105
8.8 High
-
learndash, stellarwp learndash lms +1 more
LearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload
CVE-2018-25019
7.5 High