Vulnerabilities

TI-2025-11095 CVE-2025-12098 · GHSA-mjfw-994c-x339

Academy LMS Pro <= 3.3.8 - Unauthenticated Sensitive Information Exposure via 'enqueue_social_login_script'

LOW 30

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.8 via the 'enqueue_social_login_script…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-11-08 No fix listed CWE-200

TI-2025-10154 CVE-2025-11086 · GHSA-3rvr-g3cj-8jg3

Academy LMS Pro <= 3.3.7 - Unauthenticated Privilege Escalation via Social Login Addon

LOW 37

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.7.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00403 Published 2025-10-22 No fix listed CWE-269

Vulnerabilities

Filters

Academy LMS Pro <= 3.3.8 - Unauthenticated Sensitive Information Exposure via 'enqueue_social_login_script'

Academy LMS Pro <= 3.3.7 - Unauthenticated Privilege Escalation via Social Login Addon