CVE-2025-11923: Improper Privilege Management

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalation. This is due to the plugin not properly validating a user's identity prior to allowing them to modify their own role via the REST API. The permission check in the...

EUVD-2020-27162

Malware in sbrugna...

EUVD-2021-11474

Malware in sbrugna...

EUVD-2021-11222

Malware in sbrugna...

EUVD-2019-6807

Malware in sbrugna...

EUVD-2024-44340

Malicious code in bioql PyPI...

EUVD-2022-24583

Malicious code in bioql PyPI...

EUVD-2024-48287

Malicious code in bioql PyPI...

EUVD-2023-58410

Malicious code in bioql PyPI...

EUVD-2024-50986

Malicious code in bioql PyPI...

EUVD-2025-6718

Malicious code in bioql PyPI...

EUVD-2024-16173

Malicious code in bioql PyPI...

EUVD-2025-19292

Malicious code in bioql PyPI...

EUVD-2024-29259

Malicious code in bioql PyPI...

WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by ChuongVN in WordPress Plugin LifterLMS versions = 8.0.6...

CVE-2025-52717

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chrisbadgett LifterLMS lifterlms allows SQL Injection.This issue affects LifterLMS: from n/a through = 8.0.6...

CVE-2025-52717

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chrisbadgett LifterLMS lifterlms allows SQL Injection.This issue affects LifterLMS: from n/a through = 8.0.6...

CVE-2025-52717 WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chrisbadgett LifterLMS lifterlms allows SQL Injection.This issue affects LifterLMS: from n/a through = 8.0.6...

CVE-2025-52717

CVE-2025-52717 corresponds to an SQL Injection in the WordPress plugin LifterLMS (versions n/a through 8.0.6). Multiple sources confirm a server-side SQL injection vulnerability due to improper neutralization of SQL commands in LifterLMS, affecting the WP LMS for eLearning, Online Courses, and Qu...

CVE-2025-52717 WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chrisbadgett LifterLMS allows SQL Injection. This issue affects LifterLMS: from n/a through 8.0.6...