hookandhook vulnerabilities
6 published CVEs name hookandhook among the affected products.
- 6Published CVEs6 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-10630
WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter
hookandhook · WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses
Medium4.3 - CVE-2026-31914
WordPress WP Courses LMS plugin <= 3.2.26 - Cross Site Scripting (XSS) vulnerability
hookandhook · WP Courses LMS
Medium6.5 - CVE-2024-56268
WordPress Post Grid Elementor Addon plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability
hookandhook · Post Grid Elementor Addon
Medium6.5 - CVE-2024-12172
WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update
hookandhook · WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses
High7.5 - CVE-2020-36752
Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery Bypass
hookandhook · Coming Soon & Maintenance Mode Page & Under Construction
Medium4.3 - CVE-2020-36707
Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery
hookandhook · Coming Soon & Maintenance Mode Page & Under Construction
High8.8