CVE-2024-1209
Description
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads.
Wordfence
Severity: MEDIUM
CVE ID: CVE-2024-1209
CVSS Score: 5.3
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Proof Of Concept
Nuclei Templates for CVE-2024-1209
Refrence: Project Discovery GitHub
karlemilnikka
Sensitive Information Exposure via assignments in LearnDash.
Refrence: GitHub