Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:08:17 +0000 CVE-2026-5348 — Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure https://cve.radiocsirt.org/vuln/cve-2026-5348 <p><strong>Affected:</strong> kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution</p> <p>The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.8.1. This is due to the &#39;/topics&#39; REST API endpoint being registered with a permission callback set to &#39;__return_true&#39;, allowing unauthenticated access to course curriculum data without verifying the course&#39;s post status or user enrollment. This makes it possible for unauthenticated attackers to access detailed curriculum information for private, draft, scheduled, or password-protected courses by enumerating course IDs.</p> <p><strong>Affected:</strong> kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution</p> <p>The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.8.1. This is due to the &#39;/topics&#39; REST API endpoint being registered with a permission callback set to &#39;__return_true&#39;, allowing unauthenticated access to course curriculum data without verifying the course&#39;s post status or user enrollment. This makes it possible for unauthenticated attackers to access detailed curriculum information for private, draft, scheduled, or password-protected courses by enumerating course IDs.</p> https://cve.radiocsirt.org/vuln/cve-2026-5348