WordPress Plugin Vulnerabilities

Academy LMS < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure via render_quiz_answers

Description

The plugin does not verify that a quiz question belongs to the course the requesting user is authorized to access before returning that question's answer options, allowing any authenticated user with access to a single course, such as an enrolled student, to read the quiz answer options of questions belonging to other courses they are not enrolled in.

Proof of Concept

Affects Plugins

Fixed in 4.0.0

References

Classification

Type
IDOR
CWE

Miscellaneous

Original Researcher
Morato Antoine
Submitter
Morato Antoine
Verified
Yes

Timeline

Publicly Published
2026-10-05 (about 2 days ago)
Added
2026-10-05 (about 1 day ago)
Last Updated
2026-10-05 (about 1 day ago)

Other