Known vulnerabilities in the Academy LMS plugin
14 security advisories have been published for the Academy LMS plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Academy LMS - Security Vulnerability (CVE-2026-16563) MEDIUM
- Academy LMS - Security Vulnerability (CVE-2026-12376) MEDIUM
- Academy LMS - Broken Access Control (CVE-2026-14184) MEDIUM
- Academy LMS - Security Vulnerability (CVE-2026-9341) MEDIUM
- Academy Lms - Security Vulnerability (CVE-2026-5348) MEDIUM
- Academy LMS - Privilege Escalation (CVE-2025-15521) CRITICAL
- Academy Lms - PHP Object Injection (CVE-2025-12099) HIGH
- Academy LMS - Information Disclosure (CVE-2025-12098) MEDIUM
- Academy LMS - Privilege Escalation (CVE-2025-11086) HIGH
- Academy Lms - Broken Access Control (CVE-2024-38701) MEDIUM
- Academy Lms - Broken Access Control (CVE-2024-32714) MEDIUM
- Academy Lms - Information Disclosure (CVE-2024-35171) MEDIUM
- Academy Lms - Broken Access Control (CVE-2024-33912) HIGH
- Academy Lms - Privilege Escalation (CVE-2024-1505) HIGH