Vulnerabilities in LearnDash

3 results

CVE-2023-28777HIGHWordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL InjectionEPSS 0.7%CVE-2026-16310CRITICALMemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' ParameterEPSS 0.5%CVE-2025-24662MEDIUMWordPress LearnDash LMS Plugin <= 4.20.0.1 - Broken Access Control vulnerabilityEPSS 0.3%