CVE Database /
CVE-2024-1210
CVE · Medium
CVE-2024-1210 — LearnDash LMS [sfwd-lms] < 4.10.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-1210
|
LearnDash LMS [sfwd-lms] < 4.10.2 |
Exposure of Sensitive Information to an Unauthorized Actor |
Medium
5.3
|
< 4.10.2
|
4.10.2 |
2024-02-02 |
—
|
CVE-2024-1210
The WordPress LearnDash LMS plugin before version 4.10.2 contains a sensitive data exposure vulnerability that was discovered by Karl Emil Nikka. This flaw allows unauthorized access to sensitive information within the plugin. The vulnerability has been resolved in version 4.10.2 and later, making an update to this version or higher necessary to secure affected installations.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings