Unknown Learndash LMS vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Learndash LMS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2018-25019learndashlearndash+2
EPSS score
1.58%
The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploaded in the learndash_assignment_process_init() function, which could allow unauthenticated users to upload arbitrary files to the web server