Vulnerabilities

TI-2024-25935 CVE-2024-38701 · GHSA-mxgw-57r7-q28c

WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability

HIGH 71

Authorization Bypass Through User-Controlled Key vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00372 Published 2024-07-22 No fix listed CWE-639

TI-2024-21594 CVE-2024-32714 · GHSA-5hfj-v78p-rrrj

WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00323 Published 2024-06-09 No fix listed CWE-862

TI-2024-23246 CVE-2024-35171 · GHSA-8hh7-xjj5-hfr6

WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability

LOW 31

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00586 Published 2024-05-13 No fix listed CWE-200

TI-2024-22382 CVE-2024-33912 · GHSA-fx5j-8jwv-3gcc

WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability

LOW 38

Missing Authorization vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 1.9.16.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0044 Published 2024-05-06 No fix listed CWE-862

TI-2024-01406 CVE-2024-1505 · GHSA-grmc-pw34-vq48

Improper privilege management in kodezen Academy LMS – WordPress LMS Plugin for Complete…

MEDIUM 41

The Academy LMS – eLearning and online course solution for WordPress plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.9.19.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00756 Published 2024-03-13 No fix listed CWE-269