CVE-2024-1208: LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1208?
CVE-2024-1208 is categorized as a high-severity vulnerability due to its potential for sensitive information exposure.
How do I fix CVE-2024-1208?
To fix CVE-2024-1208, update the LearnDash LMS plugin to version 4.10.3 or later.
Who is affected by CVE-2024-1208?
CVE-2024-1208 affects all versions of the LearnDash LMS plugin for WordPress up to and including 4.10.2.
What sensitive information can be exposed by CVE-2024-1208?
CVE-2024-1208 allows unauthenticated attackers to access quiz questions which can be sensitive information.
Is CVE-2024-1208 a remote vulnerability?
Yes, CVE-2024-1208 can be exploited remotely, allowing attackers to access sensitive information without authentication.