Beveiligingsadvies

CVE-2026-12376

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-31 06:00:11

Laatst bijgewerkt 2026-07-31 17:43:31

Toegewezen door WPScan

CVSS-score 4.3

Status PUBLISHED

Beschrijving

The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above (enrolled in any single course) to read every user's quiz attempts across the whole site, including personal data such as IP addresses, names, registration dates and quiz results.

← Alle CVE's bekijken Bekijk op cve.org ↗