A vulnerability, which was classified as problematic, has been found in Creator LMS Plugin up to 1.1.12 on WordPress. Affected is the function
get_items_permissions_check of the component Options Update Handler. This manipulation causes missing authorization.
This vulnerability appears as CVE-2025-15347. The attack may be initiated remotely. There is no available exploit.