CVE-2026-14231: LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts
Vulnerability summary
CVE-2026-14231 is a medium (CVSS 4.3) vulnerability in unknown lifterlms. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20.9% of scored vulnerabilities. 1 public exploit is recorded. Fixed in 10.0.10.
Timeline
- 30-07-2026PublishedVulnerability first disclosed.
- 30-07-2026Last modifiedVulnerability information updated.
Description
The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by supplying the post type.
CVSS metrics
3 scores · 3 sources · 1 version- NVDNIST4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- wordfenceSource4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
21%
Versus all other CVEs
30-day change
Increase +0.07 pp
From 0.22% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (wpscan.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Unknown1 product
- lifterlms< 10.0.10
Wordpress1 product
- lifterlms< 10.0.10
2 vendors · 2 products