WordPress Plugin 'LifterLMS' < 3.37.15 Arbitrary File Write

The WordPress application running on the remote host has a version of the 'LifterLMS' plugin that is prior to 3.37.15 and, thus, is affected by an arbitrary file write vulnerability that can allow the attackers to write and execute arbitrary PHP code on the server by changing their first name on...

CVE-2020-6008

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

CVE-2020-6008

The LifterLMS WordPress plugin, in versions prior to 3.37.15 , is vulnerable to an arbitrary file write flaw. The root cause is identified as insufficient validation of files during the file upload process , which allows remote attackers to write and execute arbitrary PHP code on the server. Prac...