Skip to content
OpenAdvisories

Vendor

stellarwp

136 known vulnerabilities.

Products

GiveWP – Donation Plugin and Fundraising Platform 34 Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 30 The Events Calendar 20 GiveWP 8 Membership Plugin – Restrict Content 7 Event Tickets and Registration 7 LearnDash LMS 7 WPComplete 4 Gutenberg Blocks by Kadence Blocks 3 Kadence WooCommerce Email Designer 3 Event Tickets 3 Restrict Content 2 Bookit — Booking & Appointment Calendar 2 iThemes Sync 1 Give – Divi Donation Modules 1 LearnDash LMS – Reports 1 Membership Plugin – Kadence Memberships 1 Virtue 1 Image Widget 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-1208 Public exploit

    LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API

    The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.

    stellarwp LearnDash LMS Web / CMS
  • Medium 5.3
    CVE-2024-1209 Public exploit

    LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments

    The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attac…

    stellarwp LearnDash LMS Web / CMS
  • Medium 5.3
    CVE-2023-47668 Public exploit

    WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin <= 3.2.7 versions.

    stellarwp Membership Plugin – Restrict Content