CVE-2024-1209

MEDIUM NUCLEI

LearnDash LMS <4.10.1 - Info Disclosure

Title source: llm

Description

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads.

Exploits (1)

nomisec WRITEUP 2 stars

by karlemilnikka · poc

https://github.com/karlemilnikka/CVE-2024-1209

View Code ZIP pw:eip

Nuclei Templates (1)

LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments

MEDIUMVERIFIEDby ritikchaddha

Shodan: http.html:/wp-content/plugins/sfwd-lms

FOFA: body=/wp-content/plugins/sfwd-lms

References (3)

[Exploit, Third Party Advisory] https://github.com/karlemilnikka/CVE-2024-1209

[Release Notes] https://www.learndash.com/release-notes/

[Third Party Advisory] https://www.wordfence.com/threat-intel/vulnerabilities/id/7191955e-0db1-4ad1-878b-74f90ca59c91?source=cve

Scores

CVSS v3 5.3

EPSS 0.4709

EPSS Percentile 97.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

learndash/learndash < 4.10.3

StellarWP/LearnDash LMS < 4.10.1

Published Feb 05, 2024

Tracked Since Feb 18, 2026