CVE-2026-14231
Deferred Deferred - Pending Action

Authentication Bypass in LifterLMS WordPress Plugin

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: WPScan

Description
The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by supplying the post type.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-08-19
AI Q&A
2026-07-30
EPSS Evaluated
2026-08-18
NVD
CVE-2026-14231
EUVD
EUVD-2026-50994

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
lifterlms lifterlms to 10.0.10 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the LifterLMS WordPress plugin before version 10.0.10. It allows any authenticated user with subscriber-level access to read sensitive information like coupon codes by exploiting a missing capability check in an AJAX handler. The plugin only verifies if the user is logged in but does not restrict access based on user roles.

Detection Guidance

Check if any authenticated users with subscriber-level access can access sensitive data via AJAX requests. Test by sending a crafted request to admin-ajax.php with post_type set to llms_coupon, llms_voucher, llms_order, or llms_access_plan while logged in as a subscriber. If responses reveal internal data like coupon codes, the vulnerability is present.

Impact Analysis

An attacker with subscriber access could exploit this to view internal post types such as coupon codes, orders, or access plans. This could lead to unauthorized disclosure of sensitive data like discounts or customer information, potentially aiding further attacks or misuse.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by exposing sensitive personal or financial data. GDPR requires protecting personal data, while HIPAA mandates safeguarding health-related information. Unauthorized disclosure may result in legal penalties or reputational damage.

Mitigation Strategies

Update the LifterLMS plugin to version 10.0.10 or later immediately. If updating is not possible, restrict subscriber-level access to sensitive areas or disable the select2 query AJAX handler until a patch is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-14231. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart