Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

Vulnerabilities 11Slug academyLatest version 3.7.3WordPress.org →

Minimum safe version

3.5.4

Update to 3.5.4 or later to address 11 fixable vulnerabilities

Latest available3.7.3 ✓
Critical 9.8
2026-01-21< 3.5.1

CVE-2025-15521

CVEWordfence
Medium 6.5
2025-12-30< 3.4.1

Academy LMS <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

WordfenceCVE
Medium 5.5
2025-09-22< 3.3.5

WordPress Academy LMS Plugin <= 3.3.4 is vulnerable to Insecure Direct Object References (IDOR)

PatchstackWordfenceEUVDCVE