CVE-2026-110284 | LifterLMS Plugin up to 10.3.1 on WordPress Shortcode llms_get_template template_name/default_path file inclusion

October 14, 2026 Yanac

A vulnerability classified as critical has been found in LifterLMS Plugin up to 10.3.1 on WordPress. This impacts the function llms_get_template of the component Shortcode Handler. Performing a manipulation of the argument template_name/default_path results in file inclusion.

This vulnerability is cataloged as CVE-2026-110284. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More