PatchTheCVE: learndashhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-56940: An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Servichttps://patchthecve.com/cve/CVE-2024-56940.htmlhttps://patchthecve.com/cve/CVE-2024-56940.htmlWed, 17 Jun 2026 08:13:05 +0000HIGH 7.5: An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file uploads.CVE-2024-56939: LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-commenthttps://patchthecve.com/cve/CVE-2024-56939.htmlhttps://patchthecve.com/cve/CVE-2024-56939.htmlWed, 17 Jun 2026 08:13:05 +0000MEDIUM 5.4: LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class.CVE-2024-56938: LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-https://patchthecve.com/cve/CVE-2024-56938.htmlhttps://patchthecve.com/cve/CVE-2024-56938.htmlWed, 17 Jun 2026 08:13:05 +0000MEDIUM 5.4: LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class.