academylms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

academylms records in CISA KEV

No academylms vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-10154 CVE-2025-11086 · GHSA-3rvr-g3cj-8jg3

Academy LMS Pro <= 3.3.7 - Unauthenticated Privilege Escalation via Social Login Addon

LOW 37

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.7.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00403 Published 2025-10-22 No fix listed CWE-269

TI-2025-11095 CVE-2025-12098 · GHSA-mjfw-994c-x339

Academy LMS Pro <= 3.3.8 - Unauthenticated Sensitive Information Exposure via 'enqueue_social_login_script'

LOW 30

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.8 via the 'enqueue_social_login_script…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-11-08 No fix listed CWE-200

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0