CVE-2024-1208 in LMS Plugin

Riassunto

di MITRE • 06/02/2024

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: Wordfence
• Prenotare: 02/02/2024
• Divulgazione: 06/02/2024
• Moderazione: accettato
• Voce: VDB-252778
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.3 (NVD)
• EPSS: 0.05285
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-1208
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-1208
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-1208/