WordPress plugin
Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium3
- Low0
All Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Courses for Membership Add On <= 1.2.3 - Cross-Site Request Forgery to Course Modifications <1.2.4Update to 1.2.4 | — | |
| Medium4.4 | Courses for Membership Add On <= 1.2.4 - Authenticated (Admin+) Stored Cross-Site Scripting <1.2.5Update to 1.2.5 | — | |
| Medium4.3 | Courses for Membership Add On <= 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Course Modifications <1.2.4Update to 1.2.4 | CVE-2023-39990 | |
| Critical9.8 | SQL Injection ≤1.0.5Update to 1.1 | — |
- Medium4.3Courses for Membership Add On <= 1.2.3 - Cross-Site Request Forgery to Course Modifications
<1.2.4Update to 1.2.4
- Medium4.4Courses for Membership Add On <= 1.2.4 - Authenticated (Admin+) Stored Cross-Site Scripting
<1.2.5Update to 1.2.5
- Medium4.3Courses for Membership Add On <= 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Course Modifications
<1.2.4Update to 1.2.4
- Critical9.8SQL Injection
≤1.0.5Update to 1.1
Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS: common questions
Does Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS: 1 critical, 3 medium. None are known to affect version null.
How do I check which version of Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS vulnerability?
0e454573-4b34-40e3-b4c3-10eb71dfa03e, published Aug 8, 2023: Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Cross-Site Request Forgery to Course Modifications. Severity: Medium (CVSS 4.3).
Is any Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS vulnerability listed in CISA KEV?
No. None of the known Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS vulnerabilities is currently listed in the CISA KEV catalog.