LifterLMS kayıtları
lifterlms üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %21,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-862 Missing Authorization2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2019-15896Kavram kanıtı | An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress.lifterlms · lifterlms · CWE-306 | Kritik9,8 | — | %6,5 | 10 Eyl 2019 |
40Planlayın | CVE-2020-6008İstismar yok | LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code executionlifterlms · lifterlms · CWE-434 | Kritik9,8 | — | %3,8 | 31 Mar 2020 |
39İzleyin | CVE-2025-52717İstismar yok | WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerabilitylifterlms · lifterlms · CWE-89 | Kritik9,8 | — | %0,4 | 27 Haz 2025 |
35İzleyin | CVE-2024-4743İstismar yok | LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcodelifterlms · lifterlms · CWE-89 | Yüksek8,8 | — | %0,5 | 5 Haz 2024 |
35İzleyin | CVE-2024-31363İstismar yok | WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerabilitylifterlms · lifterlms · CWE-352 | Yüksek8,8 | — | %0,3 | 12 Nis 2024 |
30İzleyin | CVE-2021-24562İstismar yok | LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDORlifterlms · lifterlms · CWE-639 | Yüksek7,5 | — | %1,6 | 23 Ağu 2021 |
28İzleyin | CVE-2024-7349İstismar yok | LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injectionlifterlms · lifterlms · CWE-89 | Yüksek7,2 | — | %0,5 | 6 Eyl 2024 |
26İzleyin | CVE-2023-6160İstismar yok | LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletionlifterlms · lifterlms · CWE-22 | Orta6,7 | — | %0,8 | 22 Kas 2023 |
24İzleyin | CVE-2022-1250İstismar yok | LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scriptinglifterlms · lifterlms · CWE-79 | Orta6,1 | — | %1,0 | 2 May 2022 |
24İzleyin | CVE-2024-13619Kavram kanıtı | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 8.0.1 - Reflected XSSlifterlms · lifterlms · CWE-79 | Orta6,1 | — | %0,6 | 15 May 2025 |
22İzleyin | CVE-2021-24308Kavram kanıtı | LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profilelifterlms · lifterlms · CWE-79 | Orta5,4 | — | %3,2 | 24 May 2021 |
21İzleyin | CVE-2024-0377İstismar yok | LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_reviewlifterlms · lifterlms · CWE-284 | Orta5,3 | — | %0,7 | 13 Mar 2024 |
21İzleyin | CVE-2025-2290İstismar yok | LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashinglifterlms · lifterlms · CWE-862 | Orta5,3 | — | %0,3 | 19 Mar 2025 |
17İzleyin | CVE-2024-12596İstismar yok | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletionlifterlms · lifterlms · CWE-862 | Orta4,3 | — | %0,3 | 18 Ara 2024 |
- CVE-2019-1589641Planlayın
An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress.
KritikCVSS 9,8Kavram kanıtıEPSS %6lifterlms · lifterlms10 Eyl 2019
- CVE-2020-600840Planlayın
LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution
KritikCVSS 9,8İstismar yokEPSS %4lifterlms · lifterlms31 Mar 2020
- CVE-2025-5271739İzleyin
WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0lifterlms · lifterlms27 Haz 2025
- CVE-2024-474335İzleyin
LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode
YüksekCVSS 8,8İstismar yokEPSS %0lifterlms · lifterlms5 Haz 2024
- CVE-2024-3136335İzleyin
WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0lifterlms · lifterlms12 Nis 2024
- CVE-2021-2456230İzleyin
LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR
YüksekCVSS 7,5İstismar yokEPSS %2lifterlms · lifterlms23 Ağu 2021
- CVE-2024-734928İzleyin
LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %1lifterlms · lifterlms6 Eyl 2024
- CVE-2023-616026İzleyin
LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
OrtaCVSS 6,7İstismar yokEPSS %1lifterlms · lifterlms22 Kas 2023
- CVE-2022-125024İzleyin
LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1lifterlms · lifterlms2 May 2022
- CVE-2024-1361924İzleyin
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 8.0.1 - Reflected XSS
OrtaCVSS 6,1Kavram kanıtıEPSS %1lifterlms · lifterlms15 May 2025
- CVE-2021-2430822İzleyin
LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile
OrtaCVSS 5,4Kavram kanıtıEPSS %3lifterlms · lifterlms24 May 2021
- CVE-2024-037721İzleyin
LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review
OrtaCVSS 5,3İstismar yokEPSS %1lifterlms · lifterlms13 Mar 2024
- CVE-2025-229021İzleyin
LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing
OrtaCVSS 5,3İstismar yokEPSS %0lifterlms · lifterlms19 Mar 2025
- CVE-2024-1259617İzleyin
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
OrtaCVSS 4,3İstismar yokEPSS %0lifterlms · lifterlms18 Ara 2024