The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes WordPress plugin is vulnerable to blind SQL Injection via the 'order' parameter in all versions up to 7.7.5. The vulnerability arises from insufficient escaping of user-supplied input and lack of proper SQL query preparation, allowing authenticated administrators to inject additional SQL queries. This can lead to unauthorized disclosure of sensitive data from the database. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

An attacker with administrator-level access can exploit this vulnerability to perform blind SQL Injection attacks, potentially extracting sensitive information from the backend database. The impact includes compromise of data confidentiality, integrity, and availability within the affected WordPress plugin environment. Since the attacker must already have high privileges, the vulnerability primarily escalates the risk of data leakage and manipulation within the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict administrator access to trusted users only and monitor for unusual database activity related to the 'order' parameter. Avoid using vulnerable versions of the plugin in production environments if possible.