chrisbadgett vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20244
3. 20253
4. 20261

Newest CVEs

• CVE-2026-5207

  LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter

  chrisbadgett · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

  Medium6.5
• CVE-2025-11923

  LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation

  chrisbadgett · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

  High8.8
• CVE-2025-52717

  WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability

  chrisbadgett · LifterLMS

  Critical9.3
• CVE-2025-2290

  LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing

  chrisbadgett · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

  Medium5.3
• CVE-2024-12596

  LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

  chrisbadgett · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

  Medium4.3
• CVE-2024-7349

  LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection

  chrisbadgett · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

  High7.2
• CVE-2024-4743

  LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode

  chrisbadgett · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

  High8.8
• CVE-2024-0377

  LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review

  chrisbadgett · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

  Medium5.3
• CVE-2023-6160

  LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion

  chrisbadgett · LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

  Low3.3