CVE-2026-120544

Name of the Vulnerable Software and Affected Versions The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress versions prior to 4.0.2

Description A Directory Traversal issue exists where authenticated attackers with contributor-level access or higher can read arbitrary .html files on the server. This occurs via the id parameter, as the plugin appends a '.html' extension to the provided path before reading the file. The contents of the accessed file are then returned within the content field of the REST JSON response. Files with extensions other than .html cannot be accessed.

Recommendations Update the plugin to version 4.0.2 or later.