StellarWP LearnDash LMS vulnerabilities
7 published CVEs name StellarWP LearnDash LMS among the affected products.
- 7Published CVEs7 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-12843
LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint
StellarWP · LearnDash LMS
Medium5.4 - CVE-2026-12483
LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler
StellarWP · LearnDash LMS
High7.5 - CVE-2026-3079
LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter
StellarWP · LearnDash LMS
Medium6.5 - CVE-2024-1208
LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
StellarWP · LearnDash LMS
Medium5.3 - CVE-2024-1209
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
StellarWP · LearnDash LMS
Medium5.3 - CVE-2024-1210
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
StellarWP · LearnDash LMS
Medium5.3 - CVE-2023-3105
LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
StellarWP · LearnDash LMS
High8.8