Skip to contentChrisbadgett Lifterlms – Wp Lms For Elearning, Online Courses, & Quizzes vulnerabilities
- chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms – wp lms for elearning, online courses, & quizzes +1 moreLifterLMS <= 10.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Content Question AnswerCVE-2026-1190986.4 Medium
- chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms – wp lms for elearning, online courses, & quizzes +1 moreLifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode AttributesCVE-2026-1102847.5 High
- chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms – wp lms for elearning, online courses, & quizzes +1 moreLifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson DataCVE-2026-1047238.8 High
- chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzesLifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' ParameterCVE-2026-52076.5 Medium
- chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzesLifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege EscalationCVE-2025-119238.8 High
- chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms +1 moreLifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post TrashingCVE-2025-22905.3 Medium
- chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms +1 moreLifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post DeletionCVE-2024-125964.3 Medium
- chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes, lifterlms +1 moreLifterLMS <= 7.7.5 - Authenticated (Admin+) SQL InjectionCVE-2024-73497.2 High
- lifterlms, chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes +1 moreLifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2024-47438.8 High
- lifterlms, chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes +1 moreLifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_reviewCVE-2024-03775.3 Medium
- lifterlms, chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes +1 moreLifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File DeletionCVE-2023-61603.3 Low