LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes vulnerabilities

2 known vulnerabilities in LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes from Chrisbadgett. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  LifterLMS – WP LMS for eLearning, Online…: Improper Privilege Management

  CVE-2025-11923Nov 13, 2025Chrisbadgett

  The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalation. This is due to the plugin not properly validating a user's identity prior to allowing them to modify their own role via the REST API. Th

• 7.2 High severity

  LifterLMS – WP LMS for eLearning, Online…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-7349Sep 6, 2024Chrisbadgett

  The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' parameter in all versions up to, and including, 7.7.5 due to insufficient escaping on the user supplied parameter and lack