Applied Cybernetics

**Name of the Vulnerable Software and Affected Versions** LearnDash LMS versions 4.25.0 through 5.1.6 **Description** An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attackers to enroll arbitrary users in paid courses without payment verification, bypassing the payment system to gain unauthorized access to premium educational content. **Recommendations** Update LearnDash LMS to a version later than 5.1.6.