LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.
learndash learndash