title: LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR
description: The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing students to see other student answers and grades
problem types: CWE-639 Authorization Bypass Through User-Controlled Key
affected:
{
product: LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress
vendor: Unknown
versions:
lessThan: 4.21.2, status: affected, version: 4.21.2, versionType: custom
}