hookandhook WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses

• CVE-2026-10630 Medium 4.3 WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter 0.5%
• CVE-2024-12172 High 7.5 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update 0.8%