CVE Tools
Track your stack

Learning Management System

13 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Learning Management System, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Learning Management System CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Learning Management System CVEs per month
MonthCVEs
2024-111
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-061
2026-070
2026-080
2026-090
2026-101

Severity

How the 13 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical323%
  • High323%
  • Medium754%

Latest CVEs

The 13 most recently published vulnerabilities affecting Learning Management System.

  1. CVE-2026-63244Authentication Bypass Vulnerability9.8
  2. CVE-2026-12789ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection4.7
  3. CVE-2024-8001VIWIS LMS Print authorization5.3
  4. CVE-2024-37870SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL commands via the id parameter.9.8
  5. CVE-2024-37840SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the Les...8.8
  6. CVE-2024-5588itsourcecode Learning Management System processscore.php sql injection6.3
  7. CVE-2024-5519ItsourceCode Learning Management System Project In PHP login.php sql injection7.3
  8. CVE-2023-40607WordPress CLUEVO LMS, E-Learning Platform Plugin <= 1.10.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3
  9. CVE-2021-25029Cluevo < 1.8.1 - Admin+ Stored Cross Site Scripting4.8
  10. CVE-2021-25200Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\student_avatar.php.9.8
  11. CVE-2021-25201SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information.7.5
  12. CVE-2018-16971Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter.4.3
  13. CVE-2018-16970Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.4.3

Product grouping is registry-driven, with AI assist and human review. How it works