Skip to content
OpenAdvisories

Vendor

lifterlms

5 known vulnerabilities.

Products

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes 3 LifterLMS 1 LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-110284

    LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes

    The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_checkout] shortcode. This is due to the ll…

    lifterlms LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes Web / CMS
  • High 8.8
    CVE-2026-104723

    LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data

    The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers…

    lifterlms LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes Web / CMS