Medium · 5.3 CVE-2024-35171 EUVD-2024-35224GHSA-8hh7-xjj5-hfr6

WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability

Published May 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Academy LMS Product: Academy LMS

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25.

Affected products

Vendor	Product	Affected	Fixed
Academy LMS	Academy LMS	≤ 1.9.25	—

References

https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-1-9-25-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry