Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nd-learning project nd-learning vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2021-24707
The Learning Courses WordPress plugin prior to 5.0 does not sanitise and escape the Email PDT identity token settings, which could allow high privilege users to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Nd-learning Project Nd-learning
5.8
CVSSv2
CVE-2019-15775
The nd-learning plugin prior to 4.8 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
Learning Courses Project Learning Courses
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege escalation
CVE-2024-20696
CVE-2024-29829
CVE-2024-33999
CVE-2024-35646
physical
CVE-2024-24919
CVE-2024-31030
local users
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started