LearnDash LMS

Vulnerabilities 13Slug sfwd-lmsLatest version 4.1.0Plugin page →

Minimum safe version

5.0.3.1

Update to 5.0.3.1 or later to address 13 fixable vulnerabilities

Latest available4.1.0 ✗
N/A
2026-03-23< 5.0.3.1

LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter

WordfenceCVE
N/A
2024-02-02< 4.10.3

LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API

Wordfence
N/A
2024-02-02< 4.10.2

LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API

Wordfence
N/A
2024-02-02< 4.10.2

LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments

Wordfence
Critical 9.8
2020-09-22< 3.1.6

WordPress LearnDash LMS premium plugin <= 3.1.5 - Unauthenticated SQL Injection (SQLi) vulnerability

PatchstackCVEWordfenceWPScan