WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

Complete e-learning platform to sell online courses, protect lessons, offer memberships, and quiz students. WP Learning Management System.

19Reported vulnerabilities
9.8Highest CVSS score
10.1.1Latest version
10,000+Active installs

What to do now

Update LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes to 10.0.10 or later. 19 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 11, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2019-15896 Critical 9.8 6.5% 3.34.5 and earlier 3.35.0 September 10, 2019
CVE-2021-24562 High 7.5 1.6% Before 4.21.2 4.21.2 August 23, 2021
CVE-2020-6008 Critical 9.8 3.8% Before 3.37.15 3.37.15 March 31, 2020
CVE-2021-24308 Medium 5.4 3.2% Before 4.21.1 4.21.1 May 24, 2021
CVE-2024-13619 Medium 6.1 0.6% Before 8.0.1 8.0.1 May 15, 2025
CVE-2022-1250 Medium 6.1 0.9% Before 1.4.0 1.4.0 May 2, 2022
CVE-2025-11923 High 8.8 0.3% 3.5.3 to 3.41.1 (inclusive)
4.0.0 to 4.21.3 (inclusive)
5.0.0 to 5.10.0 (inclusive)
6.0.0 to 6.11.0 (inclusive)
7.0.0 to 7.8.7 (inclusive)
8.0.0 to 8.0.7 (inclusive)
9.0.0 to 9.0.7 (inclusive)		 3.41.2 November 13, 2025
CVE-2024-4743 High 8.8 0.5% Before 7.6.3 7.6.3 June 5, 2024
CVE-2025-52717 High 7.5 0.3% 8.0.6 and earlier 8.0.7 July 1, 2025
CVE-2024-7349 High 7.2 0.5% Before 7.7.6 7.7.6 September 6, 2024
CVE-2023-6160 Medium 6.7 0.8% 7.4.2 and earlier 7.5.0 November 22, 2023
CVE-2026-5207 Medium 6.5 0.4% 0 to 9.2.1 (inclusive) 9.2.2 April 11, 2026
CVE-2026-14207 Medium 6.4 0.2% 10.0.9 and earlier 10.0.10 July 30, 2026
WF-daedec14-6177-43c7-89d4-a39c13d94ca4 Medium 6.1 — Before 4.21.1 4.21.1 April 29, 2021
CVE-2024-0377 Medium 5.3 0.7% Before 7.5.2 7.5.2 March 13, 2024
CVE-2025-2290 Medium 5.3 0.3% Before 8.0.2 8.0.2 March 19, 2025
CVE-2026-14231 Medium 4.3 0.2% Before 10.0.10 10.0.10 July 30, 2026
CVE-2024-12596 Medium 4.3 0.3% Before 7.8.6 7.8.6 December 18, 2024
CVE-2024-31363 Medium 4.3 0.3% 7.5.0 and earlier 7.5.1 April 8, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.