https://wordpress.org/plugins/lifterlms/#developers

The WordPress LifterLMS Plugin installed on the remote host is affected by an arbitrary file write vulnerability that can allow the attackers to write and execute arbitrary PHP code on the server by changing their first name on their profile to PHP code.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The WordPress application running on the remote host has a version of the 'LifterLMS' plugin that is prior to 3.37.15 and, thus, is affected by an arbitrary file write vulnerability that can allow the attackers to write and execute arbitrary PHP code on the server by changing their first name on their profile to PHP code.

ID	Name	Product	Family	Severity
112387	LifterLMS Plugin for WordPress < 3.37.15 Arbitrary File Write	Web Application Scanning	Component Vulnerability	critical
112387	LifterLMS Plugin for WordPress < 3.37.15 Arbitrary File Write	Web Application Scanning	Component Vulnerability	critical
136176	WordPress Plugin 'LifterLMS' < 3.37.15 Arbitrary File Write	Nessus	CGI abuses	critical

CVE-2020-6008

critical

Tenable Plugins

critical

critical

critical