Known vulnerabilities in the Wordpress Learning Management System plugin
22 security advisories have been published for the Wordpress Learning Management System plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Wordpress Learning Management System - Cross-Site Scripting (XSS) (CVE-2025-63035) MEDIUM
- Wordpress Learning Management System - Cross-Site Scripting (XSS) (CVE-2025-53420) HIGH
- Wordpress Learning Management System - Broken Access Control (CVE-2025-49925) HIGH
- Wordpress Learning Management System - Broken Access Control (CVE-2025-58668) MEDIUM
- Wordpress Learning Management System - Privilege Escalation (CVE-2015-10139) HIGH
- Wordpress Learning Management System - Authentication Bypass (CVE-2024-56044) CRITICAL
- Wordpress Learning Management System - Privilege Escalation (CVE-2024-56043) CRITICAL
- Wordpress Learning Management System - Path Traversal (CVE-2024-56045) CRITICAL
- Wordpress Learning Management System - Arbitrary File Upload (CVE-2024-56046) CRITICAL
- Wordpress Learning Management System - SQL Injection (CVE-2024-56042) CRITICAL
- Wordpress Learning Management System - Arbitrary File Upload (CVE-2024-56057) CRITICAL
- Wordpress Learning Management System - Arbitrary File Upload (CVE-2024-56054) CRITICAL
- Wordpress Learning Management System - Path Traversal (CVE-2024-56055) HIGH
- Wordpress Learning Management System - SQL Injection (CVE-2024-56053) HIGH
- Wordpress Learning Management System - Arbitrary File Upload (CVE-2024-56052) CRITICAL
- Wordpress Learning Management System - Arbitrary File Upload (CVE-2024-56050) CRITICAL
- Wordpress Learning Management System - Broken Access Control (CVE-2024-56048) HIGH
- Wordpress Learning Management System - Remote Code Execution (CVE-2024-56051) HIGH
- Wordpress Learning Management System - Path Traversal (CVE-2024-56049) HIGH
- Wordpress Learning Management System - SQL Injection (CVE-2024-56047) HIGH
- Wordpress Learning Management System - Remote Code Execution (CVE-2024-10470) CRITICAL
- Wordpress Learning Management System - Cross-Site Request Forgery (CSRF) (CVE-2023-36690) HIGH