CVE-2020-6009

—

CVSS 3.1

9.8 critical

EPSS

2%p78

Published

Apr 1, 2020 (Apr 1, 2020)

Modified

Jun 17, 2026

Description

LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.

Vendors: learndash
Products: learndash
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news2 stories

Experts found critical flaws in 3 popular e

Security AffairsApr 30, 14:56 UTC · Apr 30, 2020Vulnerability CVE-2020-6010 CVE-2020-6011 CVE-2020-11511+2 CVEs

60

Critical Bugs Found in 3 Popular e

The Hacker NewsApr 30, 11:07 UTC · Apr 30, 2020Vulnerability CVE-2020-6010 CVE-2020-11511 CVE-2020-6009+1 CVEs

60