| CVE-2026-104050 |
The Academy LMS WordPress plugin before 4.0.0 does not verify that a quiz question belongs to the course the requesting…
|
4.3
Medium
|
Oct 7, 2026 |
| CVE-2026-104049 |
The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a…
|
4.3
Medium
|
Oct 7, 2026 |
| CVE-2026-16563 |
The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when…
|
6.5
Medium
|
Aug 3, 2026 |
| CVE-2026-12376 |
The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing…
|
4.3
Medium
|
Jul 31, 2026 |
| CVE-2026-14184 |
The Academy LMS WordPress plugin before 3.8.1 does not verify ownership of a user-supplied user identifier in several of…
|
5.4
Medium
|
Jul 21, 2026 |