The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.7. This is due to the plugin not properly validating a user's role prior to registering a user via the Social Login addon. This makes it possible for unauthenticated attackers to update their role to Administrator when registering on the site.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Academy Pro Plugin | — | Update academy-pro plugin to version 3.3.8, or a newer patched version | Oct 22, 2025 | Oct 21, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub