PT-2024-28293

Name of the Vulnerable Software and Affected Versions Creativeitem Academy LMS Learning Management System version 6.8.1 Description The issue allows a remote attacker to execute arbitrary code and obtain sensitive information. This is achieved via the string parameter. Recommendations For version...

CVE-2024-37234

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Kodezen Limited Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4...

CVE-2024-37234 WordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Kodezen Limited Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4...

CVE-2024-37234

CVE-2024-37234 describes an Open Redirect in the WordPress plugin Academy LMS by Kodezen Limited, affecting Academy LMS versions up to 2.0.4. Public docs assign a CVSS v3.1 base score of 3.5 (LOW) with network access required and user interaction required. The underlying issue is URL redirection ...

CVE-2024-37234 WordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Kodezen Limited Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4...

PT-2024-27404 · Kodezen Limited · Academy Lms

Name of the Vulnerable Software and Affected Versions: Academy LMS versions 2.0.4 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, in Kodezen Limited Academy LMS. This vulnerability allows for redirection to...

CVE-2024-37234: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Kodezen Limited Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4...

WordPress plugin Academy LMS Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

WordPress Academy LMS Plugin <= 2.0.10 is vulnerable to Open Redirection

Software Academy LMS Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A3: Injection Classification Open Redirection CVE CVE-2024-37234 Patch priority Low CVSS severity Low 3.5 Developer Claim ownership PSID 657d1fa47413 Credits Mochamad Sofyan Required privilege Subscriber...

CVE-2024-32714

Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16...

CVE-2024-32714

Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16...

CVE-2024-32714

CVE-2024-32714 is a Missing Authorization (broken access control) vulnerability in the WordPress plugin “Academy LMS” for WordPress. The affected range is Academy LMS versions up to 1.9.16. Public documents identify a lack of authorization as the root issue, but do not provide exploitation detail...

CVE-2024-32714 WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16...

CVE-2024-32714 WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16...

WordPress plugin Academy LMS security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-32714: Missing Authorization

Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16...

PT-2024-24802

Name of the Vulnerable Software and Affected Versions Academy LMS versions 1.9.16 and earlier Description The issue is related to a Missing Authorization vulnerability in Academy LMS academy. Recommendations For versions 1.9.16 and earlier, update to a version that contains a fix for this issue,...

Academy LMS < 1.9.26 - Unauthenticated Sensitive Information Exposure

Description The Academy LMS – eLearning and online course solution for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.25. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data...

CVE-2024-35171

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25...

WordPress plugin Academy LMS 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...