shouldiuse.io

VERDICT

Should I use Lumi Education?

H5P: Make learning interactive. Explore over 60 content types and create engaging and effective learning materials for your students. - lumi.education

Worth it. Buy if you are a teacher or small course creator who wants free H5P authoring and can export SCORM into any LMS. Skip it if you need managed hosting, learner analytics, or enterprise-grade security assurances.

Confidence

Medium. Based on 20+ public sources; several pricing and review snippets were truncated, so exact paid prices are unverified.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support-quality evidence found.
  • Security posture

Pricing

Free

Free plan

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Lumi CloudPaid — price not shown in sources

Best for

  • Solo teachers building interactive lessons
  • Offline or low-bandwidth classrooms
  • Moodle/LMS users needing SCORM packages
  • Budget-conscious course creators

Not for

  • Anyone wanting an LMS — this only authors content
  • Enterprises needing SSO, SLAs, admin controls
  • Buyers expecting managed hosting and vendor support
  • Teams needing built-in learner analytics without extra hosting

Gotchas - check before you buy

high

CVE-2025-7062 stored XSS in h5p-nodejs-library — patch before hosting untrusted content

high

Hudson Rock lists 1,107 infostealer credentials tied to — use unique passwords

medium

H5P ecosystem is shifting toward paid models; verify current free limits before committing

medium

Small, recently relaunched company; long-term roadmap and support depth uncertain

Pros and cons

Pros

  • Free, open-source H5P desktop editor — no subscription required
  • 60+ interactive content types
  • Exports SCORM for LMS-agnostic delivery
  • Works offline as a desktop app
  • Publicly listed company reporting record H1 2026 revenue — active development

Cons

  • Stored XSS vulnerability (CVE-2025-7062) in its H5P library
  • Cloud hosting has plan limitations beyond the free tier
  • Docs admit H5P library files are not sanitized
  • No dedicated security page found on main site
  • Cloud platform is early-stage; product relaunched after two years

Sources & method

Analyzed 9/21/2026 - 14 sources - One stored XSS CVE plus exposed credential findings; official docs note library files are not sanitized.

official x4review x6security x2news x2
  • CVE-2025-7062 — Stored XSS, Stored cross-site scripting in Lumi's h5p-nodejs-library.
  • Exposed credentials, Hudson Rock reports 1,107 infostealer credentials for the domain.

Key stats

  • Value for money: 5/5

    Rating

  • Free

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money: 5/5. Free open-source core; SCORM export costs nothing.
  • Ease of use: 4/5. Plenty of walkthrough tutorials; H5P has a learning curve.
  • Feature depth: 4/5. 60+ content types, desktop editor, cloud hosting.
  • Support quality. No support-quality evidence found.
  • Security posture: 2/5. Stored XSS CVE plus exposed credential findings.
  • 60+ Content types H5P library, per official site
  • Yes Free tier Free plan plus paid cloud tiers
  • 13 iOS reviews AppShunter listing
  • Euronext Oslo Listed LUMI.OL, publicly traded

Pricing

Free plan

Free

  • Open-source desktop H5P editor
  • Offline authoring
  • SCORM export

Lumi Cloud

Paid — price not shown in sources

  • Hosted H5P content
  • Plan limitations apply

Security

One stored XSS CVE plus exposed credential findings; official docs note library files are not sanitized.

  • CVE-2025-7062 — Stored XSSStored cross-site scripting in Lumi's h5p-nodejs-library.⁵
  • Exposed credentialsHudson Rock reports 1,107 infostealer credentials for the domain.⁶

What users say

Educators report strong engagement gains and value the free authoring, while Reddit threads worry about H5P moving to paid models.

“You can export to SCORM,”
Reddit, r/instructionaldesign
“The LMS could track completion”
Reddit, r/elearning

Alternatives

Compare Lumi Education with each alternative.

  • H5P.com

    Official hosted H5P: LMS integrations and analytics, no desktop setup.

  • Moodle (built-in H5P)

    Free LMS that runs H5P natively with gradebook tracking.

  • Google Forms

    Good enough for simple quizzes; zero learning curve.

Companies that use it

  • University of Rhode Island (URI ITS)10
  • Senior High School 1 Gorontalo
Full analysis

Based on 20+ public sources; several pricing and review snippets were truncated, so exact paid prices are unverified.

Free open-source H5P editor — ideal for solo teachers building quizzes and interactive lessons; not an LMS, and security flags exist.

Methodology

Based on 20+ public sources; several pricing and review snippets were truncated, so exact paid prices are unverified.

Sources

  1. Lumi Education official sitelumi.education
    official
  2. Lumi GitHub repositorygithub.com
    official
  3. Lumi Plans & Limitationshelp.lumi.education
    official
  4. Lumi security docs — library sanitizationdocs.lumi.education
    official
  5. CVE-2025-7062 — NVDnvd.nist.gov
    security
  6. Hudson Rock — lumi.education credentialshudsonrock.com
    security
  7. Reddit: H5P no longer free?reddit.com
    review
  8. Reddit: Publishing with H5Preddit.com
    review
  9. Reddit: LMS-agnostic course materialreddit.com
    review
  10. URI ITS — Enhancing engagement with Lumiits.uri.edu
    review
  11. ITechGuides Lumi review 2026itechguides.com
    review
  12. Investing.com — Lumi H1 2026 earningsinvesting.com
    news
  13. Yahoo Finance — Lumi Education Group ASfinance.yahoo.com
    news
  14. Teachfloor — H5P alternatives 2026teachfloor.com
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.