CVE-2024-38701

Authorization Bypass Through User-Controlled Key vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4.

Score

CVSS 3.1 8.8 High

Status

Modified - audit@patchstack.com

Published

2024-07-22

Last modified

2026-04-28

Weaknesses

CWE-639

Affected products

• Academy Lms (Academy Lms)
• Academy Lms (Kodezen)

References

• https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-2-0-4-broken-access-control-vulnerab…