Chrisbadgett Lifterlms vulnerabilities

• chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms – wp lms for elearning, online courses, & quizzes +1 more LifterLMS <= 10.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Content Question Answer CVE-2026-119098 6.4 MediumNovember 7, 2026
• chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms – wp lms for elearning, online courses, & quizzes +1 more LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes CVE-2026-110284 7.5 HighOctober 14, 2026
• chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms – wp lms for elearning, online courses, & quizzes +1 more LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data CVE-2026-104723 8.8 HighOctober 10, 2026
• chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter CVE-2026-5207 6.5 MediumApril 11, 2026
• chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation CVE-2025-11923 8.8 HighNovember 13, 2025
• chrisbadgett lifterlms WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability CVE-2025-52717 9.3 CriticalJune 27, 2025
• chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms +1 more LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing CVE-2025-2290 5.3 MediumMarch 19, 2025
• chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms +1 more LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion CVE-2024-12596 4.3 MediumDecember 18, 2024
• chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms +1 more LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection CVE-2024-7349 7.2 HighSeptember 6, 2024
• lifterlms, chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes +1 more LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2024-4743 8.8 HighJune 5, 2024
• lifterlms, chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes +1 more LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review CVE-2024-0377 5.3 MediumMarch 13, 2024
• lifterlms, chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes +1 more LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion CVE-2023-6160 3.3 LowNovember 22, 2023