Lucene search

WordPress Academy LMS Plugin <= 1.9.19 is vulnerable to Privilege Escalation

🗓️ 21 Feb 2024 00:00:00Reported by Lucio SáType

WordPress Academy LMS Plugin <= 1.9.19 Privilege Escalation CVE-2024-150

Reporter	Title	Published	Views	Family All 8
Wordfence Blog	$1,313 Bounty Awarded for Privilege Escalation Vulnerability Patched in Academy LMS WordPress Plugin	21 Feb 202420:11	–	wordfence
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (February 19, 2024 to February 25, 2024)	29 Feb 202417:09	–	wordfence
Prion	Privilege escalation	13 Mar 202416:15	–	prion
CVE	CVE-2024-1505	13 Mar 202416:15	–	cve
NVD	CVE-2024-1505	13 Mar 202416:15	–	nvd
Cvelist	CVE-2024-1505	13 Mar 202415:27	–	cvelist
WPVulnDB	Academy LMS – eLearning and online course solution for WordPress < 1.9.20 - Authenticated (Subscriber+) Privilege Escalation	21 Feb 202400:00	–	wpvulndb
Vulnrichment	CVE-2024-1505	13 Mar 202415:27	–	vulnrichment

Vulners

Node

academy_lms academy_lmsRange≤1.9.19

Source	Link
wordpress	www.wordpress.org/plugins/academy/
cve	www.cve.org/CVERecord
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/academy/academy-lms-elearning-and-online-course-solution-for-wordpress-1919-authenticated-subscriber-privilege-escalation

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS38.8