CVE-2025-11923 | LifterLMS Plugin up to 9.1.0 on WordPress Endpoint update_item_permissions_check privilege escalation

November 12, 2025 Yanac

A vulnerability categorized as critical has been discovered in LifterLMS Plugin up to 9.1.0 on WordPress. Affected by this vulnerability is the function update_item_permissions_check of the component Endpoint. Executing manipulation can lead to privilege escalation.

This vulnerability is registered as CVE-2025-11923. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More