Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes, with AI-generated Chinese analysis, references, and POCs.

Vendor: chrisbadgett

CVE IDTitleCVSSSeverityPublished
CVE-2026-5207 LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter CWE-89 6.5 Medium2026-04-11
CVE-2025-11923 LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation CWE-269 8.8 High2025-11-13
CVE-2025-2290 LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing CWE-862 5.3 Medium2025-03-19
CVE-2024-12596 LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion CWE-862 4.3 Medium2024-12-18
CVE-2024-7349 LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection CWE-89 7.2 High2024-09-06
CVE-2024-4743 LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode CWE-89 8.8 High2024-06-05
CVE-2024-0377 LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review CWE-284 5.3 Medium2024-03-13
CVE-2023-6160 LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion CWE-22 3.3 Low2023-11-22

All 8 known CVE vulnerabilities affecting LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes with full Chinese analysis, references, and POCs where available.