GCVE - cpe:2.3:a:kodezen:academy_lms:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kodezen:academy_lms:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Kodezen (`121ce376-df0d-58cb-889a-70deb51b3b24`)
Product	Academy Lms (`a7625525-bd6f-549c-bb7a-abc78b613dd0`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-38701`	vulnerable	2026-06-08 06:41:47.955053	WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability MEDIUM (4.3) Authorization Bypass Through User-Controlled Key vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4. Published: 2024-07-22T10:14:44.172Z Updated: 2026-04-28T16:10:04.747Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-2-0-4-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35171`	vulnerable	2026-06-08 06:37:35.375181	WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability MEDIUM (5.3) Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25. Published: 2024-05-13T09:08:22.947Z Updated: 2026-04-28T16:09:51.658Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-1-9-25-sensitive-data-exposure-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-33912`	vulnerable	2026-06-08 06:37:32.302287	WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability HIGH (7.1) Missing Authorization vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 1.9.16. Published: 2024-05-06T19:07:55.005Z Updated: 2026-04-28T16:09:46.250Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-1-9-16-broken-access-control-on-paid-courses-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32714`	vulnerable	2026-06-08 06:37:23.700849	WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16. Published: 2024-06-09T17:03:58.167Z Updated: 2026-04-28T16:09:39.614Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-1-9-16-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1505`	vulnerable	2026-06-08 06:25:40.299132	Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation HIGH (8.8) The Academy LMS – eLearning and online course solution for WordPress plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.9.19. This is due to plugin allowing arbitrary user meta updates through the saved_user_info() function. This makes it possible for authenticated attackers, with minimal permissions such as students, to elevate their user role to that of an administrator. Published: 2024-03-13T15:27:10.817Z Updated: 2026-04-08T17:16:13.140Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/b150f90a-ccb7-4c19-a4b3-eaf9ec264ba8?source=cve https://plugins.trac.wordpress.org/changeset/3037880/academy#file473	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.