CVE-2018-25019 LearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload
Unauthenticated attackers can upload arbitrary files to the web server via the LearnDash LMS plugin, potentially leading to remote code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-25019?
CVE-2018-25019 is a high-severity vulnerability in Unknown LearnDash LMS, published on 1 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploaded in the learndash_assignment_process_init() function, which could allow unauthenticated users to upload arbitrary files to the web server
Which versions are affected by CVE-2018-25019?
It affects 1 product.
Products include Learndash Learndash.
How do I fix CVE-2018-25019?
No fix has been published for CVE-2018-25019 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-25019 being exploited?
There is no known exploitation of CVE-2018-25019 in the wild and no public exploit code.
Other vulnerabilities in Unknown LearnDash LMS
- CVE-2020-6009 SQL injection in LearnDash Wordpress Plugin
- CVE-2023-3105 LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
- CVE-2023-28777 WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection
- CVE-2024-56940 Denial of service in n/a
- CVE-2024-56938 Cross-site scripting in n/a
Sources
Also known as GHSA-vvx7-4gw3-r3mv.