Approved changes feed: RSS · Atom

cpe:2.3:a:academylms:academy_lms_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAcademylms (5d23b7d8-9988-5c35-910c-423d812edc45)
ProductAcademy Lms Pro (72c2d8df-fab9-5bb8-8ea6-5411f45d69b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12098 vulnerable 2026-06-03 14:58:43.795397 Academy LMS Pro <= 3.3.8 - Unauthenticated Sensitive Information Exposure via 'enqueue_social_login_script'
MEDIUM (5.3)
The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.8 via the 'enqueue_social_login_script' function. This makes it possible for unauthenticated attackers to extract sensitive data including the Facebook App Secret if Facebook Social Login is enabled.
Published: 2025-11-08T08:27:42.051Z
Updated: 2026-04-08T17:33:42.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11086 vulnerable 2026-06-03 14:58:35.392960 Academy LMS Pro <= 3.3.7 - Unauthenticated Privilege Escalation via Social Login Addon
HIGH (8.1)
The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.7. This is due to the plugin not properly validating a user's role prior to registering a user via the Social Login addon. This makes it possible for unauthenticated attackers to update their role to Administrator when registering on the site.
Published: 2025-10-22T11:25:18.300Z
Updated: 2026-04-08T16:35:39.003Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.