High
CVE-2026-104723
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 25
Reset filters
Medium
CVE-2026-14231
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 10.0.10 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-14207
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 10.0.9 - Authenticated (Custom role+) Stored Cross-Site Scripting
Medium
CVE-2026-5207
LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter
High
CVE-2025-11923
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation
High
CVE-2025-52717
LifterLMS <= 8.0.6 - Unauthenticated SQL Injection
Medium
CVE-2025-2290
LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing
Medium
CVE-2024-13619
LifterLMS <= 8.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12596
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
High
CVE-2024-7349
LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection
High
CVE-2024-4743
LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-31363
LifterLMS <= 7.5.0 - Cross-Site Request Forgery
Medium
CVE-2024-0377
LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review
Low
CVE-2023-6160
LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
Medium
CVE-2023-39990
Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Course Modifications
Medium
55fac183-bd8d-4e16-b25a-784861897deb
Paid Memberships Pro - Courses for Membership Add On <= 1.2.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
0e454573-4b34-40e3-b4c3-10eb71dfa03e
Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Cross-Site Request Forgery to Course Modifications
Critical
d7f024c5-80d8-490f-b448-9bccb877024b
Premium Courses & eLearning <= 1.0.5 - SQL Injection
Medium
CVE-2022-1250
LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
High
CVE-2021-24562
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress < 4.21.2 - Insecure Direct Object Reference
Medium
CVE-2021-24308
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin <= 4.21.0 - Stored Cross-Site Scripting
Medium
daedec14-6177-43c7-89d4-a39c13d94ca4
LMS by LifterLMS <= 4.21.0 - Reflected Cross-Site Scripting
Critical
CVE-2020-6008
LifterLMS Wordpress Plugin <= 3.37.14 - Arbitrary File Write
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.