Academy Lms (Unknown) - vulnerabilities (CVEs)

5 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-07. Vendor: Unknown.

CVEs of Academy Lms

• CVE-2026-104050 - CVSS 4.3 (medium), 2026-10-07: The Academy LMS WordPress plugin before 4.0.0 does not verify that a quiz question belongs to the course the requesting user is authorized to access before…
• CVE-2026-104049 - CVSS 4.3 (medium), 2026-10-07: The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST…
• CVE-2026-16563 - CVSS 6.5 (medium), 2026-08-03: The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST…
• CVE-2026-12376 - CVSS 4.3 (medium), 2026-07-31: The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with…
• CVE-2026-14184 - CVSS 5.4 (medium), 2026-07-21: The Academy LMS WordPress plugin before 3.8.1 does not verify ownership of a user-supplied user identifier in several of its lesson AJAX handlers, allowing…