Skip to content
OpenAdvisories

Vendor

chrisbadgett

9 known vulnerabilities.

Products

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes 8 LifterLMS 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2025-11923

    LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation

    The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalation. This is due to the plugin not properly validating a user's identity prior to allowing them to modify their own role via the REST API. T…

    chrisbadgett LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes Web / CMS
  • High 7.2
    CVE-2024-7349

    LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection

    The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' parameter in all versions up to, and including, 7.7.5 due to insufficient escaping on the user supplied parameter and lac…

    chrisbadgett LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes Web / CMS
  • High 8.8
    CVE-2024-4743

    LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode

    The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to SQL Injection via the orderBy attribute of the lifterlms_favorites shortcode in all versions up to, and including, 7.6.2 due to insufficient escaping on the user supplied…

    chrisbadgett LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes Web / CMS