WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses, with AI-generated Chinese analysis, references, and POCs.

Vendor: hookandhook

CVE ID	Title	CVSS	Severity	Published
CVE-2026-10630	WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter CWE-639	4.3	Medium	2026-08-25
CVE-2024-12172	WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update CWE-862	7.5	High	2024-12-12

All 2 known CVE vulnerabilities affecting WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses with full Chinese analysis, references, and POCs where available.