VULNERABILITY INTELLIGENCE
CVE-2024-1208
CVSS score5.3 MEDIUM
EPSS probability5.29%
CISA KEVNot currently listed
Published2024-02-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.
Weakness classification
- security@wordfence.com: CWE-200
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- security@wordfence.com — Exploit, Third Party Advisory
- security@wordfence.com — Release Notes, Vendor Advisory
- security@wordfence.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory