Threats Tagged 'ghsa-vxgf-qvq7-h87v'

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning WordPress plugin up to version 4.0.3 contains a privilege escalation vulnerability. Authenticated users with the 'academy_guardian' role or higher can exploit improper privilege management to elevate any existing WordPress account to the 'academy_student' role. This role grants additional capabilities such as 'edit_posts' and, if enabled, 'upload_files'. The vulnerability arises because the plugin assigns the 'academy_student' role before validating the guardian-ward relationship and does not revert this assignment if validation fails.