Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Academy LMS – WordPress LMS Plugin for Complete eLearning Solution — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in Academy LMS – WordPress LMS Plugin for Complete eLearning Solution, with AI-generated Chinese analysis, references, and POCs.

Vendor: kodezen

CVE IDTitleCVSSSeverityPublished
CVE-2025-15521 Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover CWE-639 9.8 Critical2026-01-21
CVE-2025-12099 Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses' CWE-502 7.2 High2025-11-08
CVE-2024-1505 Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation CWE-269 8.8 High2024-03-13

All 3 known CVE vulnerabilities affecting Academy LMS – WordPress LMS Plugin for Complete eLearning Solution with full Chinese analysis, references, and POCs where available.