CVE-2020-6008

—

CVSS 3.1

9.8 critical

EPSS

4%p89

Published

Mar 31, 2020 (Mar 31, 2020)

Modified

Jun 17, 2026

Description

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution

Vendors: lifterlms
Products: lifterlms
Ecosystems: WordPress
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news2 stories

Experts found critical flaws in 3 popular e

Security AffairsApr 30, 14:56 UTC · Apr 30, 2020Vulnerability CVE-2020-6010 CVE-2020-6011 CVE-2020-11511+2 CVEs

60

Critical Bugs Found in 3 Popular e

The Hacker NewsApr 30, 11:07 UTC · Apr 30, 2020Vulnerability CVE-2020-6010 CVE-2020-11511 CVE-2020-6009+1 CVEs

60