Academy LMS WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Academy LMS WordPress plugin, specifically in versions through 3.3.8. The issue arises in the 'enqueue_social_login_script' function, where unauthenticated attackers can access sensitive data, such as the Facebook App Secret, if Facebook Social Login is enabled.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, including the Facebook App Secret.

Remediation

Users can update to version 3.3.9 or a newer patched version to address this vulnerability.