PatchTheCVElearndash vulnerabilities
Recent CVEs affecting learndash products. 3 tracked.
learndash has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-12. Highest priority: CVE-2024-56940 (score 43/100).
- CVE-2024-56940 HIGH 7.5 DOWNGRADE An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Servic
- CVE-2024-56939 MEDIUM 5.4 DOWNGRADE LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment
- CVE-2024-56938 MEDIUM 5.4 DOWNGRADE LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-
FAQ
How do I fix learndash vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is learndash being exploited right now?
None of the tracked learndash CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which learndash CVE should I patch first?
CVE-2024-56940 currently ranks highest (43/100): An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Servic.