LearnDash LMS - Reports Free <= 1.8.2.1 - Missing Authorization to Plugin Settings Update
mediumThe LearnDash LMS – Reports plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions (i.e. wrld_set_configuration, wrld_exclude_settings_save, apply_time_tracking_settings, wp_ajax_wrld_gutenberg_block_visit, etc..) in all versions up to, and includi...
- CVSS:
- 5.4
- Affected:
- up to 1.8.2.1
- Fixed in:
- 1.8.2.2
- Disclosed:
- Jul 8, 2024