CVE-2024-1210: LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1210?
CVE-2024-1210 is classified as a Sensitive Information Exposure vulnerability, which can significantly impact the security of LearnDash LMS.
How do I fix CVE-2024-1210?
To fix CVE-2024-1210, update the LearnDash LMS plugin to version 4.10.2 or higher.
Who is affected by CVE-2024-1210?
All users of the LearnDash LMS plugin for WordPress prior to version 4.10.2 are affected by CVE-2024-1210.
What type of attack can exploit CVE-2024-1210?
CVE-2024-1210 can be exploited by unauthenticated attackers to access sensitive quiz data through the API.
When was CVE-2024-1210 disclosed?
CVE-2024-1210 was disclosed in early 2024 and affects all versions of the LearnDash LMS plugin up to and including 4.10.1.