LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

Güvenlik açıkları

• CVE-2025-52717kimlik doğrulamasız≤ 8.0.6

  WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability

  Kritik 9.8

• CVE-2020-6008kimlik doğrulamasız

  LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution

  Kritik 9.8

• CVE-2019-15896kimlik doğrulamasız

  An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress.

  Kritik 9.8

• CVE-2024-31363kimlik doğrulamasız · tıklama gerekir≤ 7.5.0

  WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability

  Yüksek 8.8

• CVE-2025-11923giriş gerekir≤ 9.0.7

  LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation

  Yüksek 8.8

• CVE-2024-4743katılımcı+≤ 7.6.2

  LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode

  Yüksek 8.8

• CVE-2024-7349yönetici≤ 7.7.5

  LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection

  Yüksek 7.2

• CVE-2026-5207giriş gerekir≤ 9.2.1

  LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter

  Orta 6.5

• CVE-2025-2290kimlik doğrulamasız≤ 8.0.1

  LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing

  Orta 5.3

• CVE-2024-0377kimlik doğrulamasız≤ 7.5.1

  LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review

  Orta 5.3

• CVE-2024-12596abone+≤ 7.8.5

  LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

  Orta 4.3