Academy LMS – WordPress LMS Plugin for Complete eLearning Solution — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Academy LMS – WordPress LMS Plugin for Complete eLearning Solution, with AI-generated Chinese analysis, references, and POCs.

Vendor: kodezen

CVE ID	Title	CVSS	Severity	Published
CVE-2026-5348	Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure CWE-639	5.3	Medium	2026-07-02
CVE-2025-15521	Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover CWE-639	9.8	Critical	2026-01-21
CVE-2025-12099	Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses' CWE-502	7.2	High	2025-11-08
CVE-2024-1505	Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation CWE-269	8.8	High	2024-03-13

All 4 known CVE vulnerabilities affecting Academy LMS – WordPress LMS Plugin for Complete eLearning Solution with full Chinese analysis, references, and POCs where available.