Input validation vulnerability in Premium Courses & eLearning with Paid Memberships Pro for LearnDash, LifterLMS, Sensei LMS & TutorLMS 1.2.4

The Paid Memberships Pro – Courses for Membership Add On plugin for WordPress is vulnerable to a security risk called Cross-Site Request Forgery. This means that unauthenticated attackers can update and remove courses from the course page without needing to log in, as long as they can get a site administrator to click on a link. This is possible because the plugin versions up to 1.2.3 do not have an extra layer of security verification to protect against this kind of attack.