网安资讯详情 - SecLens 情报雷达

CVE-2026-14184 | Academy LMS Plugin up to 3.8.0 on WordPress AJAX handler authorization

来源： vuldb · 发布时间 2026-07-21 14:56 (UTC+08:00) · 抓取时间 2026-07-21 15:01 (UTC+08:00)

原文链接

摘要

A vulnerability has been found in <a href="https://vuldb.com/product/academy_lms_plugin">Academy LMS Plugin up to 3.8.0</a> on WordPress and classified as <a href="https://vuldb.com/kb/risk">critical</a>. This affects an unknown function of the component <em>AJAX handler</em>. Performing a manipulation results in authorization bypass. This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-14184">CVE-2026-14184</a>. The attack is possible to be carried out remotely. No exploit exists.

标签

• CVE-2026-14184

扩展字段

{
  "raw_pub_date": "Tue, 21 Jul 2026 08:56:40 +0200"
}