CVE-2024-4743

Name of the Vulnerable Software and Affected Versions LifterLMS – WordPress LMS Plugin for eLearning versions up to, and including, 7.6.2

Description The issue arises from insufficient escaping on the user-supplied orderBy attribute of the lifterlms favorites shortcode and lack of sufficient preparation on the existing SQL query. This allows authenticated attackers with Contributor-level access and above to append additional SQL queries into already existing queries, potentially extracting sensitive information from the database.

Recommendations For versions up to, and including, 7.6.2, update to a version that addresses the SQL injection vulnerability. As a temporary workaround, consider restricting access to the lifterlms favorites shortcode for users with Contributor-level access and above until a patch is available. Avoid using the orderBy attribute in the lifterlms favorites shortcode until the issue is resolved.