Academy LMS <= 3.8.1 Unauthenticated IDOR Vulnerability Disclosure (CVE-2026-6348)

Vulnerability Overview Vulnerability Name: Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure CVE ID: CVE-2026-6348 CVSS Score: 5.3 (Medium) Publish Date: July 1, 2026 Last Updated: July 2, 2026 Researcher: Md. Moniruzzaman Prodhon (NormalProdhan) - Knight Squad Impact Scope Software Type: Plugin Software Name: Academy LMS – WordPress LMS Plugin for Complete eLearning Solution Affected Versions: <= 3.8.1 Fixed Version: 3.8.2 Remediation Remediation Method: Upgrade to version 3.8.2 or later. Vulnerability Description The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin contains an insecure direct object reference vulnerability in versions 3.8.1 and earlier. This vulnerability allows unauthenticated attackers to access course data, including private, draft, scheduled, or password-protected course information, by enumerating course IDs. References plugins.trac.wordpress.org Additional Information Share Options: Facebook, Twitter, LinkedIn, Email Recent Vulnerability List Academy LMS <= 3.5.3 - Missing Authorization - CVE ID: CVE-2026-25372 - CVSS: 4.3 - Researcher: Jakub Herman - Date: February 17, 2026 Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover - CVE ID: CVE-2025-15521 - CVSS: 9.8 - Researcher: vgo0 - Date: January 20, 2026 Academy LMS <= 3.4.0 - Authenticated (Contributor) Stored Cross-Site Scripting - CVE ID: CVE-2025-48527 - CVSS: 6.4 - Researcher: Muhammad Yudha - DJ - Date: December 30, 2025 Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator) PHP Object Injection via 'import_all_courses' - CVE ID: CVE-2025-12099 - CVSS: 7.2 - Researcher: Michelle Porter - Date: November 7, 2025 Academy LMS <= 3.3.4 - Authenticated (Academy Instructor) Insecure Direct Object Reference - CVE ID: CVE-2025-59562 - CVSS: 4.3 - Researcher: ni0_arafat_ni0 - Date: September 22, 2025 Academy LMS <= 2.0.4 - Missing Authorization - CVE ID: CVE-2024-38701 - CVSS: 2.7 - Researcher: filme - Date: July 11, 2024 Academy LMS <= 2.0.10 - Open Redirect - CVE ID: CVE-2024-37234 - CVSS: 8.3 - Researcher: Mochamad Sofyan - Date: June 21, 2024 Academy LMS <= 1.9.25 - Unauthenticated Sensitive Information Exposure - CVE ID: CVE-2024-35171 - CVSS: 5.3 - Researcher: Peng Zhou - Date: May 10, 2024 Academy LMS <= 1.9.16 - Missing Authorization - CVE ID: CVE-2024-33912 - CVSS: 4.3 - Researcher: Steven Julian - Date: April 29, 2024 Academy LMS <= 1.9.16 - Missing Authorization - CVE ID: CVE-2024-32714 - CVSS: 5.4 - Researcher: Mochamad Sofyan - Date: April 22, 2024 Additional Information Disclaimer: This record contains copyrighted material. Copyright: Copyright 2012-2026 Defiant Inc. Contact: For adding information or reporting errors, contact wfi-support@wordfence.com. Additional Services Wordfence Intelligence: Provides free personal and commercial API access, as well as webhook integration. Wordfence WordPress Plugin: Install the plugin to receive vulnerability notifications immediately. Documentation: View the API documentation on how to access and use vulnerability data. Footer Information Business Hours: 9am-8pm ET, 6am-5pm PT, and 2pm-11pm UTC/GMT (excluding weekends and holidays). Support: 24-hour customer support, 365 days a year, with a 1-hour response time. Terms of Service: Terms of Service, Privacy Policy, Do Not Sell or Share My Personal Information. Social Media: X, Facebook, YouTube, Instagram. Products: Wordfence Free, Wordfence Premium, Wordfence Care, Wordfence Response, Wordfence CLI, Wordfence Intelligence, Wordfence Central. Support: Documentation, Learning Center, Free Support, Premium Support. News: Blog, News, Vulnerability Advisory. About: About Wordfence, Affiliate Program, Employment, Contact, Security, CVE Request Form. Subscription: Subscribe to news and updates. Copyright: © 2012-2026 Defiant Inc. All rights reserved.

Goal Reached Thanks to every supporter — we hit 100%!

Academy LMS <= 3.8.1 Unauthenticated IDOR Vulnerability Disclosure (CVE-2026-6348)

More from this source