Lucene search

CVE-2024-1505

🗓️ 13 Mar 2024 16:23:15Reported by [email protected]Type

The Academy LMS WordPress plugin allows privilege escalation via user meta update

Reporter	Title	Published	Views	Family All 8
Wordfence Blog	$1,313 Bounty Awarded for Privilege Escalation Vulnerability Patched in Academy LMS WordPress Plugin	21 Feb 202420:11	–	wordfence
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (February 19, 2024 to February 25, 2024)	29 Feb 202417:09	–	wordfence
Patchstack	WordPress Academy LMS Plugin <= 1.9.19 is vulnerable to Privilege Escalation	21 Feb 202400:00	–	patchstack
Cvelist	CVE-2024-1505	13 Mar 202415:27	–	cvelist
Prion	Privilege escalation	13 Mar 202416:15	–	prion
CVE	CVE-2024-1505	13 Mar 202416:15	–	cve
Vulnrichment	CVE-2024-1505	13 Mar 202415:27	–	vulnrichment
WPVulnDB	Academy LMS – eLearning and online course solution for WordPress < 1.9.20 - Authenticated (Subscriber+) Privilege Escalation	21 Feb 202400:00	–	wpvulndb

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b150f90a-ccb7-4c19-a4b3-eaf9ec264ba8
plugins	www.plugins.trac.wordpress.org/changeset/3037880/academy

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Mar 2024 16:15Current

8.8High risk

Vulners AI Score8.8

CVSS38.8

EPSS0.0004