Vulnerabilities in hookandhook
6 resultsCVE-2024-12172HIGHWP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta UpdateEPSS 0.8%CVE-2020-36752MEDIUMComing Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery BypassEPSS 0.5%CVE-2026-10630MEDIUMWP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' ParameterEPSS 0.5%CVE-2020-36707HIGHComing Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request ForgeryEPSS 0.5%CVE-2024-56268MEDIUMWordPress Post Grid Elementor Addon plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-31914MEDIUMWordPress WP Courses LMS plugin <= 3.2.26 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%