CVE-2020-6009 - LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection

Back Back to CVE browser

CRITICAL

LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection

Published Apr 1, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.84%

Description

LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.

Affected products

Vendor n/a Product LearnDash Wordpress Plugin Default
n/a
- Version
  < 3.1.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

LearnDash Wordpress Plugin

n/a

Version	Status	Constraints
< 3.1.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27163
Advisory
https://learndash.releasenotes.io/release/YBfaq-version-316
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27163		Advisory
https://learndash.releasenotes.io/release/YBfaq-version-316		x_refsource_MISCRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner checkpoint

Published Apr 1, 2020

Updated Aug 4, 2024

Reserved Jan 7, 2020

Link CVE-2020-6009

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-6009

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-6009

ENISA EUVD

Assigner checkpoint

Published Apr 1, 2020

Updated Aug 4, 2024

Exploited since n/a

Link EUVD-2020-27163

EUVD-2020-27163