CVE-2024-1210
published 2024-02-05CVE-2024-1210: The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it…
PriorityP336medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EXPLOIT
EPSS
2.03%
78.6th percentile
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| learndash | learndash | < 4.10.2 | 4.10.2 |
| stellarwp | learndash_lms | <= 4.10.1 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
LearnDash LMS < 4.10.2 - Sensitive Information Exposure
nuclei·CVSS 5.3
CVE-2024-1210 [MEDIUM] LearnDash LMS < 4.10.2 - Sensitive Information Exposure
LearnDash LMS < 4.10.2 - Sensitive Information Exposure
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes.
Template:
id: CVE-2024-1210
info:
name: LearnDash LMS < 4.10.2 - Sensitive Information Exposure
author: ritikchaddha
severity: medium
description: |
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes.
impact: |
Unauthenticated attackers can access the LearnDash API to obtain sensitive quiz materials, questions, and course content that should be
Nuclei
LearnDash LMS < 4.10.3 - Sensitive Information Exposure
nuclei·CVSS 5.3
CVE-2024-1208 [MEDIUM] LearnDash LMS < 4.10.3 - Sensitive Information Exposure
LearnDash LMS < 4.10.3 - Sensitive Information Exposure
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.
Template:
id: CVE-2024-1208
info:
name: LearnDash LMS < 4.10.3 - Sensitive Information Exposure
author: ritikchaddha
severity: medium
description: |
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.
impact: |
Unauthenticated attackers can access the LearnDash API to obtain quiz questions, answer options, and point values, compro
No writeups or analysis indexed.
https://github.com/karlemilnikka/CVE-2024-1208-and-CVE-2024-1210https://www.learndash.com/release-notes/https://www.wordfence.com/threat-intel/vulnerabilities/id/61ca5ab6-5fe9-4313-9b0d-8736663d0e89?source=cvehttps://github.com/karlemilnikka/CVE-2024-1208-and-CVE-2024-1210https://www.learndash.com/release-notes/https://www.wordfence.com/threat-intel/vulnerabilities/id/61ca5ab6-5fe9-4313-9b0d-8736663d0e89?source=cve
2024-02-05
Published