Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 21:05:22 +0000 CVE-2026-12376 — Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint https://cve.radiocsirt.org/vuln/cve-2026-12376 <p><strong>Affected:</strong> Unknown Academy LMS</p> <p>The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above (enrolled in any single course) to read every user&#39;s quiz attempts across the whole site, including personal data such as IP addresses, names, registration dates and quiz results.</p> <p><strong>Affected:</strong> Unknown Academy LMS</p> <p>The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above (enrolled in any single course) to read every user&#39;s quiz attempts across the whole site, including personal data such as IP addresses, names, registration dates and quiz results.</p> https://cve.radiocsirt.org/vuln/cve-2026-12376