← WordPress Vulnerabilities
WordPress security by component

Academy LMS

Academy LMS is a WordPress component with 12 published CVE records in this archive. The latest tracked vulnerability was published Jul 14, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: academy

CVE-2026-9341: Academy LMS: A security weakness

Academy LMS is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.8.0.

PublishedJul 14, 2026
Known safe version> 3.8.0
Safe version
Jul 14, 2026 CVE-2026-9341
Academy LMS: A security weakness
Academy LMS is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.8.0.
> 3.8.0
CVE4.3
NVDPending
Jul 02, 2026 CVE-2026-5348
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution: A security weakness
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.8.1.
> 3.8.1
CVE5.3
NVDPending
Feb 19, 2026 CVE-2026-25372
Academy LMS: A security weakness
Academy LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVDPending
Jan 21, 2026 CVE-2025-15521
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution: Privilege escalation or authentication bypass
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE9.8
NVDPending
Dec 24, 2025 CVE-2025-68527
Academy LMS: Cross-site scripting
Academy LMS is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVDPending
Nov 08, 2025 CVE-2025-12099
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution: Code execution
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE7.2
NVDPending
Sep 22, 2025 CVE-2025-59562
Academy LMS: A security weakness
Academy LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.5
NVDPending
Jul 22, 2024 CVE-2024-38701
Academy LMS: A security weakness
Academy LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD8.8
Jul 06, 2024 CVE-2024-37234
Academy LMS: An open redirect
Academy LMS is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.
See mitigation notes
CVE3.5
NVDPending
Jun 09, 2024 CVE-2024-32714
Academy LMS: A security weakness
Academy LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD8.8
May 14, 2024 CVE-2024-35171
Academy LMS: A security weakness
Academy LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVD5.3
May 06, 2024 CVE-2024-33912
Academy LMS: A security weakness
Academy LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE7.1
NVD8.8