CVE-2025-15521: Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover
The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.5.0. This is due to the plugin not properly validating a user's identity prior to updating their password and relying solely on a publicly-exposed nonce for authorization. This makes it possible for unauthenticated attackers to change arbitrary user's password, including administrators, and gain access to their account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15521?
The severity of CVE-2025-15521 is considered high due to the potential for unauthenticated privilege escalation and account takeover.
How do I fix CVE-2025-15521?
To fix CVE-2025-15521, update the Academy LMS plugin to version 3.5.1 or later.
Who is affected by CVE-2025-15521?
CVE-2025-15521 affects all versions of the Academy LMS plugin for WordPress up to and including version 3.5.0.
What type of vulnerability is CVE-2025-15521?
CVE-2025-15521 is an unauthenticated privilege escalation vulnerability related to account takeover.
Can CVE-2025-15521 be exploited remotely?
Yes, CVE-2025-15521 can be exploited remotely, allowing attackers to gain unauthorized access to user accounts.