LifterLMS
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 3 | – | Nov 7, 2026 |
| LifterLMS | 1 | – | Apr 12, 2024 |
| LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress | 1 | – | May 24, 2021 |
Exploited and recent CVEs
- CVE-2026-119098 LifterLMS <= 10.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Content Question Answer –
- CVE-2026-110284 LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes 0.7%
- CVE-2026-104723 LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data 0.4%
- CVE-2024-31363 WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability 0.3%
- CVE-2021-24308 LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile 3.2%