CVE-2026-14231 — LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts
The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing…
Published: 2026-07-30 · CVSS: 4.3 · CVSS 3.1
The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by supplying the post type.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7