Privilege Escalation Vulnerability in Academy LMS Plugin for WordPress

CVE-2025-11086

What is CVE-2025-11086?

The Academy LMS Plugin for WordPress is prone to a privilege escalation issue due to inadequate validation of user roles when utilizing the Social Login addon. This oversight allows unauthenticated attackers to manipulate their user role and gain unauthorized Administrator access upon registration. As a result, it is crucial for users of this plugin to ensure they are running a patched or updated version to safeguard their WordPress sites from potential exploitations.

References