LifterLMS LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

• CVE-2026-119098 Medium 6.4 LifterLMS <= 10.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Content Question Answer –
• CVE-2026-110284 High 7.5 LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes 0.7%
• CVE-2026-104723 High 8.8 LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data 0.4%