Lifterlms (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-30. Vendor: Unknown.

CVEs of Lifterlms

• CVE-2026-14207 - CVSS 6.1 (medium), 2026-07-30: The LifterLMS WordPress plugin before 10.0.10 does not strip event-handler attributes from a course pricing field before storing and rendering it, allowing…
• CVE-2026-14231 - CVSS 4.3 (medium), 2026-07-30: The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is…
• CVE-2024-13619 - CVSS 6.1 (medium), 2025-05-15: The LifterLMS WordPress plugin before 8.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site…