LearnDash
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| LearnDash LMS | 2 | – | Jan 27, 2025 |
| MemberDash | 1 | – | Sep 6, 2026 |
Exploited and recent CVEs
- CVE-2026-16310 MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter 0.5%
- CVE-2025-24662 WordPress LearnDash LMS Plugin <= 4.20.0.1 - Broken Access Control vulnerability 0.3%
- CVE-2023-28777 WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection 0.7%