Skip to content
OpenAdvisories

Product · kodezen

Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-5348

    Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure

    The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.8.1. This is due to the '/topics' REST API endpoint being registered with a permi…

    kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution Web / CMS