WordPress Vulnerability Scanner WPSec
Vulnerabilities / LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress

LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress vulnerabilities

Advisories WPSec published for LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes. Other sources may list more. Its attack surface: LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-06 WPSEC-2026-0478 LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress <= 10.2.1 - Authenticated (Instructor's Assistant+) PHP Object Injection via Course Builder Custom Fields High 7.5 10.3.0
2026-10-06 WPSEC-2026-0477 LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress <= 10.2.1 - Unauthenticated Sensitive Information Exposure via RSS Feeds Medium 5.3 10.3.0
2026-10-06 WPSEC-2026-0476 LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress <= 10.2.1 - Authenticated (Instructor's Assistant+) PHP Object Injection via Lesson Clone and Course Import High 7.5 10.3.0

License: CC BY 4.0