CVE-2024-1208

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.

• CWE-200

• https://github.com/karlemilnikka/CVE-2024-1208-and-CVE-2024-1210Exploit, Third Party Advisory
• https://www.learndash.com/release-notes/Release Notes, Vendor Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/ae735117-e68b-448e-ad41-258d1be3aebc?source=cveThird Party Advisory
• https://github.com/karlemilnikka/CVE-2024-1208-and-CVE-2024-1210Exploit, Third Party Advisory
• https://www.learndash.com/release-notes/Release Notes, Vendor Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/ae735117-e68b-448e-ad41-258d1be3aebc?source=cveThird Party Advisory

Published

Feb 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12073The Meteor Slides plugin for WordPress is vulnerable to Stor…5.4
• CVE-2024-12074A Denial of Service (DoS) vulnerability was discovered in th…6.5
• CVE-2024-12076The Target Video Easy Publish plugin for WordPress is vulner…6.1
• CVE-2024-12077The Booking Calendar and Booking Calendar Pro plugins for Wo…6.1
• CVE-2024-12078ECOVACS robot lawn mowers and vacuums use a shared, static s…6.3
• CVE-2024-12079ECOVACS robot lawnmowers store the anti-theft PIN in clearte…4.8
• CVE-2024-12082in OpenHarmony v4.0.0 and prior versions allow a local attac…5.5
• CVE-2024-12083Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-serie…6.6
• CVE-2024-12084A heap-based buffer overflow flaw was found in the rsync dae…9.8
• CVE-2024-12085A flaw was found in rsync which could be triggered when rsyn…7.5
• CVE-2024-12086A flaw was found in rsync. It could allow a server to enumer…6.8
• CVE-2024-12087A path traversal vulnerability exists in rsync. It stems fro…7.5