Skip to content
OpenAdvisories

Vendor

hookandhook

6 known vulnerabilities.

Products

WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses 2 Coming Soon & Maintenance Mode Page & Under Construction 2 WP Courses LMS 1 Post Grid Elementor Addon 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-10630

    WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter

    The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing…

    hookandhook WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses Web / CMS
  • Medium 6.5
    CVE-2026-31914

    WordPress WP Courses LMS plugin <= 3.2.26 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hookandhook WP Courses LMS wp-courses allows DOM-Based XSS.This issue affects WP Courses LMS: from n/a through <= 3.2.26.

    hookandhook WP Courses LMS
  • Medium 6.5
    CVE-2024-56268

    WordPress Post Grid Elementor Addon plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hookandhook Post Grid Elementor Addon post-grid-elementor-addon.This issue affects Post Grid Elementor Addon: from n/a through <= 2.0.18.

    hookandhook Post Grid Elementor Addon
  • Medium 4.3
    CVE-2020-36752

    Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery Bypass

    The Coming Soon & Maintenance Mode Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.57. This is due to missing or incorrect nonce validation on the save_meta_box() function. This makes it possible for u…

    hookandhook Coming Soon & Maintenance Mode Page & Under Construction Web / CMS