Skip to content
OpenAdvisories

Vendor

chrisbadgett

9 known vulnerabilities.

Products

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes 8 LifterLMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2023-6160

    LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion

    The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 7.4.2 via the maybe_serve_export function. This makes it possible for authenticated attackers, with administrator or…

    chrisbadgett LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes Web / CMS