Academy LMS < 2.0.5 - Missing Authorization

Description

The Academy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the quiz_attempts_permissions_check() function in versions up to, and including, 2.0.4. This makes it possible for authenticated attackers, with academy instructor-level access and above, to view quiz results of private quizzes.