CVE-2020-6008

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

CVE-2020-6008

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

CVE-2020-6008

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

CVE-2020-6008

The LifterLMS WordPress plugin, in versions prior to 3.37.15 , is vulnerable to an arbitrary file write flaw. The root cause is identified as insufficient validation of files during the file upload process , which allows remote attackers to write and execute arbitrary PHP code on the server. Prac...

LifterLMS < 3.37.15 - Arbitrary File Writing

The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress WordPress plugin was affected by an Arbitrary File Writing security vulnerability...

CVE-2020-6008: Unrestricted Upload of File with Dangerous Type

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

WordPress LifterLMS plugin <= 3.37.14 - Arbitrary File Writing vulnerability

Arbitrary File Writing vulnerability discovered by Omri Herscovici and Sagi Tzadik in WordPress LifterLMS plugin versions = 3.37.14. Solution Update the WordPress LifterLMS plugin to the latest available version at least 3.37.15...

WordPress LifterLMS plugin power lifting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. A vulnerability exists in the 'uploadimport' function in the class.llms.admin.import.php script in LifterLMS plugin version 3.34.5 and earlier. An attacker can exploit this vulnerability to...

CVE-2019-15896

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The uploadimport function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation administrator account creation, website redirection...

CVE-2019-15896

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The uploadimport function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation administrator account creation, website redirection...

Cross site scripting

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The uploadimport function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation administrator account creation, website redirection...

CVE-2019-15896

CVE-2019-15896 affects WordPress LifterLMS plugin up to version 3.34.5. The vulnerability resides in the upload_import function of class.llms.admin.import.php, allowing unauthenticated imports that can lead to privilege escalation (administrator account creation), website redirection, and stored ...

CVE-2019-15896

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The uploadimport function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation administrator account creation, website redirection...

CVE-2019-15896: Missing Authentication for Critical Function

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The uploadimport function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation administrator account creation, website redirection...

WordPress LifterLMS plugin <= 3.34.5 - Unauthenticated Options Import vulnerability

Unauthenticated Options Import vulnerability found by Jerome Bruandet Nintechnet in WordPress LifterLMS plugin versions = 3.34.5. Solution Update the WordPress LifterLMS plugin to the latest available version at least 3.35.1...

LifterLMS <= 3.34.5 - Unauthenticated Options Import

Unauthenticated Options Import, which could lead to - Website Redirection - Administrator Account Creation - Content Injection - Stored XSS The issues have been reported as fixed in 3.35.0. However v3.35.1 added additional input sanitisation and filtering...