Skip to content
PluginCanary

LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes

by LifterLMS · 10,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 13 Oct 2026, fixed in 10.3.2.

83/ 100 Canary Score
Sub-scores for LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 10.3.2. Update to version 10.3.2 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 10.3.0. Update to version 10.3.0 or later.9 Oct 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
thomasplevy12 Feb 2016 to 14 Nov 2022, 605 commits
strangerstudios25 Jan 2023 to 13 Mar 2026, 62 commits
brianhogg18 Apr 2024 to 4 Nov 2026, 132 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
54
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes
Q1 20243
Q2 20244
Q3 20249
Q4 20248
Q1 20253
Q2 20255
Q3 20258
Q4 202510
Q1 20263
Q2 202611
Q3 20265
Q4 20264

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
13 Oct 2026LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes7.5<= 10.3.110.3.20
9 Oct 2026LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data8.8<= 10.2.110.3.00
30 Jul 2026LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 10.0.10 - Authenticated (Subscriber+) Information Exposure4.3< 10.0.1010.0.100
30 Jul 2026LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 10.0.9 - Authenticated (Custom role+) Stored Cross-Site Scripting6.4<= 10.0.910.0.100
10 Apr 2026LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter6.5<= 9.2.19.2.20
12 Nov 2025LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation8.83.5.3 to 3.41.1, 4.0.0 to 4.21.3, 5.0.0 to 5.10.0, 6.0.0 to 6.11.0, 7.0.0 to 7.8.7, 8.0.0 to 8.0.7, 9.0.0 to 9.0.7, 9.1.03.41.20
1 Jul 2025LifterLMS <= 8.0.6 - Unauthenticated SQL Injection7.5<= 8.0.68.0.70
18 Mar 2025LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing5.3<= 8.0.18.0.20
3 Mar 2025LifterLMS <= 8.0.0 - Reflected Cross-Site Scripting6.1<= 8.0.08.0.10
17 Dec 2024LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion4.3<= 7.8.57.8.60
5 Sep 2024LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection7.2<= 7.7.57.7.60
4 Jun 2024LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode8.8<= 7.6.27.6.30
8 Apr 2024LifterLMS <= 7.5.0 - Cross-Site Request Forgery4.3<= 7.5.07.5.10
27 Feb 2024LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review5.3<= 7.5.17.5.20
5 Nov 2023LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion3.3<= 7.4.27.5.01
17 May 2021LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress < 4.21.2 - Insecure Direct Object Reference7.5< 4.21.24.21.21
10 May 2021LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin <= 4.21.0 - Stored Cross-Site Scripting5.4< 4.21.14.21.10
29 Apr 2021LMS by LifterLMS <= 4.21.0 - Reflected Cross-Site Scripting6.1< 4.21.14.21.11
31 Mar 2020LifterLMS Wordpress Plugin <= 3.37.14 - Arbitrary File Write9.8< 3.37.153.37.150
9 Sep 2019LMS by LifterLMS <= 3.35.0 - Stored Cross-Site Scripting via Import9.8< 3.35.03.35.00

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20254.3
Q1 20265.0
Q2 20264.8
Q3 20265.0

Average rating stayed at 5.0 between Q1 2025 and Q3 2026.

Rating distribution
5 star367
4 star9
3 star4
2 star3
1 star10

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes
4 May 2026959
11 May 202610,375
18 May 20267,573
25 May 20261,338
1 Jun 20265,529
8 Jun 20266,061
15 Jun 20261,358
22 Jun 202614,037
29 Jun 20266,346
6 Jul 20266,809
13 Jul 20261,293
20 Jul 20261,101
27 Jul 20261,503
3 Aug 20267,187
10 Aug 20266,960
17 Aug 20261,610
24 Aug 20266,015
31 Aug 20261,754
7 Sep 20261,195
14 Sep 20266,768
21 Sep 20262,103
28 Sep 20262,255
5 Oct 202616,348
12 Oct 20262,799
19 Oct 20262,525
26 Oct 20263,406
2 Nov 2026391

Weekly downloads over the last 4 weeks are 51% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LearnPress - Course WishlistScore 91 · 10,000+Sensei LMS CertificatesScore 91 · 4,000+LifterLMS LabsScore 91 · 2,000+LearnPress - bbPress IntegrationScore 91 · 2,000+Custom Template for LearnDashScore 91 · 1,000+

Facts

Version11.0.0
AuthorLifterLMS
Added12 Feb 2016
Last updated3 Nov 2026
Active installs10,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHP7.4
CategoryLearning Management Systems (LMS) > Course Creation & Management
Tagslms, quiz, course, elearning, learning management system

Other plugins by this author: LifterLMS Labs, Lite LMS Progress Tracker by LifterLMS - Simple Course, Membership Site and Content Progress Tracking for WordPress

Questions

Is LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes still maintained?

LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes safe?

LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes?

The wordpress.org author is LifterLMS. Recent committers: brianhogg, strangerstudios, thomasplevy, plugin-master. We have recorded no ownership change.

What can I use instead of LifterLMS - WP LMS for eLearning, Online Courses, & Quizzes?

Plugins in the same category with a higher Canary Score: LearnPress - Course Wishlist, Sensei LMS Certificates, LifterLMS Labs, LearnPress - bbPress Integration, Custom Template for LearnDash.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue