Cchrisbadgett

Products

Exploited and recent CVEs

• CVE-2026-5207 Medium 6.5 LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter 0.4%
• CVE-2025-11923 High 8.8 LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation 0.4%
• CVE-2025-52717 Critical 9.3 WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability 0.4%
• CVE-2025-2290 Medium 5.3 LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing 0.3%
• CVE-2024-12596 Medium 4.3 LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion 0.3%
• CVE-2024-7349 High 7.2 LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection 0.5%
• CVE-2024-4743 High 8.8 LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode 0.5%
• CVE-2024-0377 Medium 5.3 LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review 0.7%
• CVE-2023-6160 Low 3.3 LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion 0.8%