LifterLMS – WP LMS for ELearning, Online Courses, & Quizzes (<= 10.2.1)

The LifterLMS WordPress plugin is vulnerable to authenticated PHP Object Injection, allowing attackers with edit_course capabilities to potentially execute code if a compatible POP chain exists elsewhere in the environment.