Advisories · Technology
Academy LMS.
Every CVE that names Academy LMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Academy LMS < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure via render_quiz_answers
- Academy LMS
- Broken access control
- CVSS 4.3 Medium
Academy LMS < 4.0.0 - Subscriber+ Arbitrary Lesson Content Disclosure via Topic REST Endpoint
- Academy LMS
- Broken access control
- CVSS 6.5 Medium
Academy LMS < 3.8.3 - Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST Endpoint
- Academy LMS
- Broken access control
- CVSS 4.3 Medium
Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint
- Academy LMS
- Broken access control
- CVSS 5.4 Medium
Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR
- Academy LMS
- Broken access control
- CVSS 4.3 Medium
WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability
- Academy LMS
- Broken access control
- CVSS 4.3 Medium
WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability
- Academy LMS
- Broken access control
- CVSS 5.3 Medium
WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability
- Academy LMS
- Information disclosure
- CVSS 7.1 High
WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability
- Academy LMS
- Broken access control
- CVSS 6.3 Medium
Academy LMS GET Parameter filter sql injection
- Academy LMS
- SQL injection
- CVSS 3.5 Low
Academy LMS GET Parameter filter cross site scripting
- Academy LMS
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Academy LMS courses cross site scripting
- Academy LMS
- Cross-site scripting (XSS)