| Package | Affected versions | Patched versions |
|---|---|---|
| learndash | ≤ 2.5.4 |
The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploaded in the learndash_assignment_process_init() function, which could allow unauthenticated users to upload arbitrary files to the web server
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free