CVE-2024-1208

CVE-2024-1208 is a sensitive information exposure vulnerability affecting all versions of the LearnDash LMS WordPress plugin up to and including 4.10.2. Unauthenticated attackers can exploit this flaw via the API to access quiz questions. With a CVSS score of 5.3 (Medium), this vulnerability is easily exploitable over the network with low complexity, potentially leading to unauthorized disclosure of sensitive educational content. While there is no evidence of active exploitation, Metasploit modules, or ExploitDB entries, a Nuclei template exists, and its high EPSS and FAUCET Risk Scores indicate a significant potential for future exploitation.