Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Academy LMS — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Academy LMS, with AI-generated Chinese analysis, references, and POCs.

Vendor: Creativeitem

CVE IDTitleCVSSSeverityPaused
CVE-2026-25372 WordPress Academy LMS plugin <= 3.5.3 - Broken Access Control vulnerability CWE-862 9.1AICriticalAI2026-02-19
CVE-2025-68527 WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-12-24
CVE-2023-53876 Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings CWE-434 5.4AIMediumAI2025-12-15
CVE-2025-59562 WordPress Academy LMS Plugin <= 3.3.4 - Insecure Direct Object References (IDOR) Vulnerability CWE-639 5.5 Medium2025-09-22
CVE-2024-38701 WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability CWE-639 4.3 Medium2024-07-22
CVE-2024-37234 WordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerability CWE-601 3.5 Low2024-07-06
CVE-2024-32714 WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability CWE-862 4.3 Medium2024-06-09
CVE-2024-35171 WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability CWE-200 5.3 Medium2024-05-13
CVE-2024-33912 WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability CWE-862 7.1 High2024-05-06
CVE-2023-3752 Creativeitem Academy LMS courses cross site scripting CWE-79 3.5 Low2023-07-19

All 10 known CVE vulnerabilities affecting Academy LMS with full Chinese analysis, references, and POCs where available.