LifterLMS vulnerabilities
5 published CVEs name LifterLMS among the affected products.
- 5Published CVEs5 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119098
LifterLMS <= 10.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Content Question Answer
lifterlms · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
Medium6.4 - CVE-2026-110284
LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes
lifterlms · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
High7.5 - CVE-2026-104723
LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data
lifterlms · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
High8.8 - CVE-2024-31363
WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability
LifterLMS · LifterLMS
Medium4.3 - CVE-2021-24308
LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile
LifterLMS · LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress
Medium5.4