StellarWP LearnDash LMS

• CVE-2026-12843 Medium 5.4 LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint 0.3%
• CVE-2026-12483 High 7.5 LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler 0.6%
• CVE-2026-3079 Medium 6.5 LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter 0.3%
• CVE-2024-1208 Medium 5.3 LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API 5.3%
• CVE-2024-1209 Medium 5.3 LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments 2.4%
• CVE-2024-1210 Medium 5.3 LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API 2.0%
• CVE-2023-3105 High 8.8 LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change 2.2%