Advisories · Technology
LearnDash MemberDash.
Every CVE that names LearnDash MemberDash among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
MemberDash <= 1.8.7 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Edit Profile 'id' Parameter
- LearnDash MemberDash
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter
- LearnDash MemberDash
- Broken access control