CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.7. This is due to the plugin not properly validating a user's role prior to registering a user via the Social Login addon. This makes it possible for unauthenticated attackers to update their role to Administrator when registering on the site.
Explanation of Vulnerability in Simple Terms
Academy LMS Pro versions 3.3.7 and earlier contain a privilege management flaw that allows unauthenticated attackers to gain unauthorized access to sensitive functionality. The vulnerability requires high attack complexity but can result in complete compromise of confidentiality, integrity, and availability. Site administrators should update to a version newer than 3.3.7 immediately.
What an attacker can do
Gain unauthorized access to sensitive site functions without authentication, potentially reading, modifying, or deleting data.
Potential impact on your site
Attackers can read student records, modify course content, delete data, or disrupt the learning platform without logging in.
Conditions required to exploit
Network access to the site; no authentication or user interaction required, though exploitation requires specific technical conditions.
Key dates
External resources
