CVE-2025-24662

Summary

CVE-2025-24662 is a critical Missing Authorization vulnerability affecting LearnDash LMS versions from n/a through 4.20.0.1. This issue arises due to incorrectly configured access control security levels, allowing unauthorized access and potential exploitation. Attackers can take advantage of this vulnerability to gain administrative privileges, compromise data, or install malicious code. Organizations using LearnDash LMS are urged to apply the necessary security patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.