Browse all 3 CVE security advisories affecting LifterLMS. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-104723 | LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data — LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes CWE-502 | 8.8 | High | 2026-10-10 |
| CVE-2024-31363 | WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability — LifterLMS CWE-352 | 4.3 | Medium | 2024-04-12 |
| CVE-2021-24308 | LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile — LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress CWE-79 | 5.4 | - | 2021-05-24 |
This page lists every published CVE security advisory associated with LifterLMS. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.