Vulnerabilities / Nias course
Nias course vulnerabilities
Advisories WPSec published for Nias Course Builder. Other sources may list more. Its attack surface: Nias course on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-10 | WPSEC-2026-2825 | Nias course <= 1.3.3 - Authenticated (Shop Manager+) Server-Side Request Forgery via nias_spotplayer_sync AJAX Action | Medium 5.5 | 2.0.0 |
| 2026-11-10 | WPSEC-2026-2824 | Nias course <= 1.3.3 - Unauthenticated Insecure Direct Object Reference to Certificate Forgery via generate_certificate AJAX Action | Medium 4.8 | 2.0.0 |
| 2026-11-10 | WPSEC-2026-2823 | Nias course <= 1.3.3 - Cross-Site Request Forgery to Course Curriculum Overwrite via nias_spotplayer_sync AJAX Action | Medium 4.3 | 2.0.0 |
License: CC BY 4.0