StellarWP LearnDash LMS vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 20263

Newest CVEs

• CVE-2026-12843

  LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint

  StellarWP · LearnDash LMS

  Medium5.4
• CVE-2026-12483

  LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler

  StellarWP · LearnDash LMS

  High7.5
• CVE-2026-3079

  LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter

  StellarWP · LearnDash LMS

  Medium6.5
• CVE-2024-1208

  LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API

  StellarWP · LearnDash LMS

  Medium5.3
• CVE-2024-1209

  LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments

  StellarWP · LearnDash LMS

  Medium5.3
• CVE-2024-1210

  LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API

  StellarWP · LearnDash LMS

  Medium5.3
• CVE-2023-3105

  LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change

  StellarWP · LearnDash LMS

  High8.8