CVE-2020-6008: Lifterlms

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution

Affected products

• Lifterlms Lifterlms: before 3.37.15 (fixed in 3.37.15)

Published 2020-03-31. Last modified 2026-06-17.