Skip to content
OpenAdvisories

Product · kodezen

Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-12099

    Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses'

    The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.8 via deserialization of untrusted input in the 'import_all_courses' function. This mak…

    kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution Web / CMS
  • High 8.8
    CVE-2024-1505

    Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation

    The Academy LMS – eLearning and online course solution for WordPress plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.9.19. This is due to plugin allowing arbitrary user meta updates through the saved_user_inf…

    kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution Web / CMS