Chrisbadgett vulnerabilities
We track 3 vulnerabilities in Chrisbadgett products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2025.
Latest Chrisbadgett vulnerabilities
- 8.8 High severity
LifterLMS – WP LMS for eLearning, Online…: Improper Privilege Management
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalation. This is due to the plugin not properly validating a user's identity prior to allowing them to modify their own role via the REST API. Th
- 9.8 Critical severity
LifterLMS: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in chrisbadgett LifterLMS lifterlms allows SQL Injection.This issue affects LifterLMS: from n/a through <= 8.0.6.
- 7.2 High severity
LifterLMS – WP LMS for eLearning, Online…: Improper Neutralization of Special Elements used in an SQL Command
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' parameter in all versions up to, and including, 7.7.5 due to insufficient escaping on the user supplied parameter and lack