WordPress LifterLMS plugin <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode vulnerability

Authenticated Contributor+ SQL Injection via Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin LifterLMS versions = 7.6.2...

WordPress LifterLMS Plugin <= 7.6.2 is vulnerable to SQL Injection

Software LifterLMS Type Plugin Vulnerable versions = 7.6.2 Fixed in 7.6.3 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-4743 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 246f92b12453 Credits Peter Thaleikis Required privilege Contributor Published...

WordPress LifterLMS plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

LifterLMS < 7.5.1 - Cross-Site Request Forgery

Description The LifterLMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.5.0. This is due to missing or incorrect nonce validation on the llms-clone-post action. This makes it possible for unauthenticated attackers to clone posts via a forged...

CVE-2024-31363

Cross-Site Request Forgery CSRF vulnerability in LifterLMS.This issue affects LifterLMS: from n/a through 7.5.0...

CVE-2024-31363 WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in LifterLMS.This issue affects LifterLMS: from n/a through 7.5.0...

CVE-2024-31363

The CVE-2024-31363 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress LifterLMS plugin, affecting versions n/a through 7.5.0. The issue targets the LifterLMS component and enables an attacker to induce unintended actions on a user’s authenticated session via CSRF. ...

CVE-2024-31363 WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in LifterLMS.This issue affects LifterLMS: from n/a through 7.5.0...

CVE-2024-31363 WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in LifterLMS.This issue affects LifterLMS: from n/a through 7.5.0...

WordPress Plugin LifterLMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-24008 · Lifterlms · Lifterlms

Name of the Vulnerable Software and Affected Versions: LifterLMS versions n/a through 7.5.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the use...

WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin LifterLMS versions = 7.5.0...

WordPress LifterLMS Plugin <= 7.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software LifterLMS Type Plugin Vulnerable versions = 7.5.0 Fixed in 7.5.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31363 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 07170935e600 Credits Dhabaleshwar Das Required...

Design/Logic Flaw

The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processreview' function in all versions up to, and including, 7.5.1. This makes it possible for unauthenticated attackers to publish...

CVE-2024-0377 LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review

The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processreview' function in all versions up to, and including, 7.5.1. This makes it possible for unauthenticated attackers to publish...

CVE-2024-0377

The CVE concerns LifterLMS – WordPress LMS Plugin for eLearning (versions

CVE-2024-0377 LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review

The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processreview' function in all versions up to, and including, 7.5.1. This makes it possible for unauthenticated attackers to publish...

PT-2024-15511 · WordPress · Lifterlms

Name of the Vulnerable Software and Affected Versions: LifterLMS – WordPress LMS Plugin for eLearning versions up to, and including, 7.5.1 Description: The issue allows unauthorized modification of data due to a missing capability check on the process review function. This enables unauthenticated...

WordPress Plugin LifterLMS Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress LifterLMS Plugin <= 7.5.1 is vulnerable to Broken Access Control

Software LifterLMS Type Plugin Vulnerable versions = 7.5.1 Fixed in 7.5.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0377 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 017a17d1f987 Credits Francesco Carlucci Required privileg...