PT-2026-27301 · WordPress · Learndash Lms

CVE-2026-3079 · Publicado 2026-03-24 · Atualizado 2026-03-25

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LearnDash LMS plugin for WordPress versions prior to 5.0.4

Description The software is susceptible to a blind time-based SQL injection through the filters[orderby order] parameter within the 'learndash propanel template' AJAX action. This is a result of inadequate escaping of user-supplied input and insufficient preparation of the existing SQL query. Authenticated attackers with Contributor-level access or higher can append additional SQL queries to existing ones, potentially allowing them to extract sensitive information from the database.

Recommendations Update to LearnDash LMS plugin version 5.0.4 or later.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-3079

Produtos afetados

Learndash Lms

Referências · 9

• http://learndash.com · Nota
• https://wordfence.com/threat-intel/vulnerabilities/id/29a560fa-03bf-435c-85da-68397deab2a6?source=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3079 · Nota de Segurança
• https://twitter.com/CVEarity/status/2036848463418433888 · Publicação no Twitter
• https://plugins.trac.wordpress.org/browser/sfwd-lms/trunk/includes/ld-reports.php#L1233 · Nota
• https://plugins.trac.wordpress.org/browser/sfwd-lms/trunk/includes/reports/includes/class-ld-propanel-activity.php#L338 · Nota
• https://plugins.trac.wordpress.org/browser/sfwd-lms/trunk/includes/reports/includes/gutenberg/lib/enqueue-scripts.php#L51 · Nota
• https://learndash.com/changelog · Nota
• https://plugins.trac.wordpress.org/browser/sfwd-lms/trunk/includes/reports/includes/class-ld-propanel-base-widget.php#L149 · Nota