GCVE - cpe:2.3:a:academy_lms:academy_lms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:academy_lms:academy_lms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Academy Lms (`9eda478b-dca8-5263-877e-b970d10c7929`)
Product	Academy Lms (`f90068e7-4fae-5f6d-9085-cd5d9449961b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-59562`	vulnerable	2026-06-03 15:06:25.460048	WordPress Academy LMS Plugin <= 3.3.4 - Insecure Direct Object References (IDOR) Vulnerability MEDIUM (5.5) Authorization Bypass Through User-Controlled Key vulnerability in Kodezen LLC Academy LMS academy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Academy LMS: from n/a through <= 3.3.4. Published: 2025-09-22T18:26:02.167Z Updated: 2026-04-28T16:13:52.612Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/academy/vulnerability/wordpress-academy-lms-plugin-3-3-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38701`	vulnerable	2026-06-03 14:56:19.351330	WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability MEDIUM (4.3) Authorization Bypass Through User-Controlled Key vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4. Published: 2024-07-22T10:14:44.172Z Updated: 2026-04-28T16:10:04.747Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-2-0-4-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35171`	vulnerable	2026-06-03 14:55:55.625601	WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability MEDIUM (5.3) Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25. Published: 2024-05-13T09:08:22.947Z Updated: 2026-04-28T16:09:51.658Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-1-9-25-sensitive-data-exposure-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-33912`	vulnerable	2026-06-03 14:55:53.151432	WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability HIGH (7.1) Missing Authorization vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 1.9.16. Published: 2024-05-06T19:07:55.005Z Updated: 2026-04-28T16:09:46.250Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-1-9-16-broken-access-control-on-paid-courses-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32714`	vulnerable	2026-06-03 14:55:47.811606	WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16. Published: 2024-06-09T17:03:58.167Z Updated: 2026-04-28T16:09:39.614Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/academy/wordpress-academy-lms-plugin-1-9-16-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.