Learningtimes
6 CVEs across 1 Learningtimes products. Browse Learningtimes vulnerabilities, severities, and proof-of-concept exploits.
Learningtimes products with known CVEs
Learningtimes CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-47647 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in LearningTimes BadgeOS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BadgeOS… |
CVE-2023-2174 | Medium | 4.3 | 2023-08-31 | The BadgeOS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_badgeos_log_entries functio… |
CVE-2023-2173 | Medium | 6.5 | 2023-08-31 | The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validatio… |
CVE-2023-2172 | Medium | 4.3 | 2023-08-31 | The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validatio… |
CVE-2023-2171 | Medium | 5.4 | 2023-08-31 | The BadgeOS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 3.7.1.6 due to in… |
CVE-2022-41987 | Medium | 6.3 | 2023-05-25 | Cross-Site Request Forgery (CSRF) vulnerability in LearningTimes BadgeOS plugin <= 3.7.1.6 versions. |