Skip to content
OpenAdvisories

Vendor

lifterlms

5 known vulnerabilities.

Products

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes 3 LifterLMS 1 LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-119098

    LifterLMS <= 10.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Content Question Answer

    The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'answer[]' parameter in all versions up to, and including, 10.3.2 due to insufficient input sanitization and output escap…

    lifterlms LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes Web / CMS
  • Medium 4.3
    CVE-2024-31363

    WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in LifterLMS.This issue affects LifterLMS: from n/a through 7.5.0.

    lifterlms LifterLMS