Kodezen Llc vulnerabilities

Products

• Academy Lms 16
• Ablocks 3

Newest

• kodezen llc ablocks WordPress aBlocks plugin <= 2.16.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-40804 7.1 HighOctober 8, 2026
• kodezen llc academy lms Academy LMS < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure via render_quiz_answers CVE-2026-104050 4.3 MediumOctober 7, 2026
• kodezen llc academy lms Academy LMS < 4.0.0 - Subscriber+ Arbitrary Lesson Content Disclosure via Topic REST Endpoint CVE-2026-104049 4.3 MediumOctober 7, 2026
• kodezen llc academy lms Academy LMS < 3.8.3 - Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST Endpoint CVE-2026-16563 6.5 MediumAugust 3, 2026
• kodezen llc academy lms Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint CVE-2026-12376 4.3 MediumJuly 31, 2026
• kodezen llc academy lms Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR CVE-2026-14184 5.4 MediumJuly 21, 2026
• kodezen academy lms Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' Parameter CVE-2026-9341 4.3 MediumJuly 14, 2026
• kodezen llc ablocks WordPress aBlocks plugin < 2.9.1 - Privilege Escalation vulnerability CVE-2026-57386 8.8 HighJuly 13, 2026
• academylms academy lms pro WordPress Academy LMS Pro plugin < 3.5.2 - Arbitrary File Upload vulnerability CVE-2026-39598 8.0 HighJune 16, 2026
• kodezen llc academy lms WordPress Academy LMS plugin <= 3.5.3 - Broken Access Control vulnerability CVE-2026-25372 6.5 MediumFebruary 19, 2026
• kodezen llc academy lms WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-68527 6.5 MediumDecember 24, 2025
• creativeitem academy lms Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings CVE-2023-53876 5.1 MediumDecember 15, 2025
• kodezen llc academy lms WordPress Academy LMS Plugin <= 3.3.4 - Insecure Direct Object References (IDOR) Vulnerability CVE-2025-59562 5.5 MediumSeptember 22, 2025
• kodezen llc ablocks WordPress aBlocks plugin <= 1.9.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47616 6.5 MediumMay 7, 2025
• academy lms lms, kodezen academy lms +1 more WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability CVE-2024-38701 4.3 MediumJuly 22, 2024
• kodezen limited academy lms WordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerability CVE-2024-37234 3.5 LowJuly 6, 2024
• academy lms lms, kodezen academy lms +1 more WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability CVE-2024-32714 4.3 MediumJune 9, 2024
• academy lms lms, kodezen academy lms +1 more WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability CVE-2024-35171 5.3 MediumMay 13, 2024
• academy lms lms, kodezen academy lms +1 more WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability CVE-2024-33912 7.1 HighMay 6, 2024
• creativeitem academy lms Creativeitem Academy LMS courses cross site scripting CVE-2023-3752 3.5 LowJuly 19, 2023