What’s Vulnerable › Products

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes version is affected

Latest LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes vulnerabilities

• CVE-2026-110284 — LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes (CVSS 7.5)
• CVE-2026-104723 — LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data (CVSS 8.8)