CVE-2025-12098 | Academy LMS Plugin up to 3.3.8 on WordPress Social Login enqueue_social_login_script information disclosure

A vulnerability identified as problematic has been detected in Academy LMS Plugin up to 3.3.8 on WordPress. Affected is the function enqueue_social_login_script of the component Social Login Handler. This manipulation causes information disclosure.

This vulnerability is tracked as CVE-2025-12098. The attack is possible to be carried out remotely. No exploit exists.