Vendor

    LearnDash

    14 known vulnerabilities in products by LearnDash, 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in LearnDash
    HighCVE-2023-3105

    StellarWP LearnDash LMS: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		8.8
    MediumCVE-2024-1208

    LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API

    also in 1 other product

    		5.3
    CriticalCVE-2020-6009

    LearnDash Wordpress Plugin: SQL Injection

    		9.8
    MediumCVE-2020-7108

    Learndash: Cross-Site Scripting (XSS)

    		5.4
    CriticalCVE-2026-16310

    LearnDash MemberDash: Authorization Bypass Through User-Controlled Key

    		9.8
    MediumCVE-2024-1209

    LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments

    also in 1 other product

    		5.3
    MediumCVE-2024-1210

    LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API

    also in 1 other product

    		5.3
    HighCVE-2018-25019

    LearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload

    		7.5
    HighCVE-2026-18053

    LearnDash MemberDash: Authorization Bypass Through User-Controlled Key

    		8.8
    HighCVE-2023-28777

    WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection

    		8.5
    HighCVE-2024-56940

    Learndash: Denial of Service

    		7.5
    MediumCVE-2024-56939

    Learndash: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2024-56938

    Learndash: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2025-24662

    WordPress LearnDash LMS Plugin <= 4.20.0.1 - Broken Access Control vulnerability

    		5.3

    Products

    Products by LearnDash
    StellarWP LearnDash LMS110