CVE-2018-25019: The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploaded in the learndash_assignment_process_init() function, which could allow unauthe

high Affects learndash (WordPress plugin). Feed 2026.10.29.1, updated 2026-10-28; published 2021-11-01; advisory modified 2026-06-17.

The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploaded in the learndash_assignment_process_init() function, which could allow unauthe

Package: learndash (WordPress plugin) WordPress
Affected versions: <=2.5.4
Fixed in: no fix recorded
Severity: high CVSS 7.5
Exploitation: not on CISA KEV · EPSS 2% (75.4th percentile)
Published: 2021-11-01
Source: nvd

References

CWE-434 CWE-862

NVD record learndash (WordPress plugin) advisories

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs How findings are ranked

Related advisories

CVE-2024-1208 medium The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in same package: learndash (WordPress plugin)
CVE-2020-7108 medium The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search f same package: learndash (WordPress plugin)
CVE-2024-1209 medium The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in same package: learndash (WordPress plugin)
CVE-2023-3105 high The LearnDash LMS plugin for WordPress is vulnerable to Insecure Direct Object References same package: learndash (WordPress plugin)
CVE-2024-1210 medium The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in same package: learndash (WordPress plugin)
CVE-2020-6009 critical LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Inject same package: learndash (WordPress plugin)