Product · hookandhook

WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.3

CVE-2026-10630

WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing…

hookandhook WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses Web / CMS

Aug 25, 2026