CVE-2026-14231 in LifterLMS Plugin
Resumen
por MITRE • 2026-07-30
The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by supplying the post type.
VulDB is the best source for vulnerability data and more expert information about this specific topic.