Vulnerabilities in lifterlms

5 results

CVE-2021-24308—LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit ProfileEPSS 3.2%CVE-2026-110284HIGHLifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode AttributesEPSS 0.7%CVE-2026-104723HIGHLifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson DataEPSS 0.4%CVE-2024-31363MEDIUMWordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%CVE-2026-119098MEDIUMLifterLMS <= 10.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Content Question AnswerEPSS 0.2%