2024-02-20 18:12:36 +00:00
id : CVE-2024-1210
info :
name : LearnDash LMS < 4.10.2 - Sensitive Information Exposure
author : ritikchaddha
severity : medium
description : |
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes.
remediation : Fixed in 4.10.2
reference :
- https://wpscan.com/vulnerability/f4b12179-3112-465a-97e1-314721f7fe3d/
- https://github.com/karlemilnikka/CVE-2024-1208-and-CVE-2024-1210
- https://nvd.nist.gov/vuln/detail/CVE-2024-1210
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score : 5.3
cve-id : CVE-2024-1210
cpe : cpe:2.3:a:learndash:learndash:*:*:*:*:*:wordpress:*:*
metadata :
verified : true
2024-03-23 09:28:19 +00:00
max-request : 1
2024-02-20 18:12:36 +00:00
vendor : learndash
product : learndash
framework : wordpress
publicwww-query : "/wp-content/plugins/sfwd-lms"
2024-03-23 09:28:19 +00:00
googledork-query : inurl:"/wp-content/plugins/sfwd-lms"
tags : wpscan,cve,cve2024,wp,wp-plugin,wordpress,exposure,learndash
2024-02-20 18:12:36 +00:00
http :
- method : GET
path :
- "{{BaseURL}}/wp-json/ldlms/v1/sfwd-quiz"
matchers-condition : and
matchers :
- type : word
part : body
words :
- '"id":'
- '"quiz_materials":'
- 'quizzes'
condition : and
- type : word
part : header
words :
- 'application/json'
- type : status
status :
- 200
2024-03-25 11:57:16 +00:00
# digest: 4b0a00483046022100c7202fd842f7dc6c8dfe92e3f49eac734aca491b962b0eb24d8b3e1d28ff9787022100e149bedbe47e88e7f2e8e6666c953919c20fce3a84386a2c59106b50a14400ee:922c64590222798bb761d5b6d8e72950