CVE-2025-52717

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/lifterlms/vulnerability/wordpress-lifterlms-8-0-6-sql-injection-vulnerability · Third Party Advisory

lifterlms のその他の脆弱性

• CVE-2024-13619中 6.1The LifterLMS WordPress plugin before 8.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Re…
• CVE-2025-2290中 5.3The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Unauthenticated Post Trashing due to a…
• CVE-2024-12596中 4.3The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to arbitrary post deletion due to a missi…
• CVE-2024-7349高 7.2The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' pa…
• CVE-2024-4743高 8.8The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to SQL Injection via the orderBy attribute of the lift…