CVE-2023-3105

Summary

CVE-2023-3105 is a vulnerability affecting the LearnDash LMS plugin for WordPress. This issue, present in versions up to 4.6.0, allows attackers with existing account access, regardless of the level, to manipulate direct object references. Consequently, users can bypass authorization and access sensitive system resources, posing a significant threat. Attackers can exploit this vulnerability to alter user passwords and potentially gain administrator account control.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.