Advisories · Technology
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes.
Every CVE that names LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes
- LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
- File inclusion
- CVSS 8.8 High
LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data
- LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
- Insecure deserialization