What’s Vulnerable › Products
chrisbadgett LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes vulnerabilities
18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Latest chrisbadgett LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes vulnerabilities
- CVE-2026-14231 — LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts (CVSS 4.3)
- CVE-2026-14207 — LifterLMS < 10.0.10 - Instructor+ Stored XSS via Featured Pricing Information (CVSS 6.1)
- CVE-2026-5207 — LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter (CVSS 6.5)
- CVE-2025-11923 — LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation (CVSS 8.8)
- CVE-2025-52717 — WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability (CVSS 9.8)
- CVE-2024-13619 — LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 8.0.1 - Reflected XSS (CVSS 6.1)
- CVE-2025-2290 — LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing (CVSS 5.3)
- CVE-2024-12596 — LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion (CVSS 4.3)
- CVE-2024-7349 — LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection (CVSS 7.2)
- CVE-2024-4743 — LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode (CVSS 8.8)
- CVE-2024-31363 — WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
- CVE-2024-0377 — LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review (CVSS 5.3)
- CVE-2023-6160 — LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion (CVSS 6.7)
- CVE-2022-1250 — LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2021-24562 — LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR (CVSS 7.5)
- CVE-2021-24308 — LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile (CVSS 5.4)
- CVE-2020-6008 — (CVSS 9.8)
- CVE-2019-15896 — (CVSS 9.8)