Known vulnerabilities in Unknown LifterLMS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-14207 | The LifterLMS WordPress plugin before 10.0.10 does not strip event-handler attributes from a course pricing field… | 6.1 Medium | Jul 30, 2026 |
| CVE-2026-14231 | The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX… | 4.3 Medium | Jul 30, 2026 |
| CVE-2024-13619 | The LifterLMS WordPress plugin before 8.0.1 does not sanitise and escape a parameter before outputting it back in the… | 6.1 Medium | May 15, 2025 |