Skip to contentKodezen Llc Academy Lms vulnerabilities
- kodezen llc academy lmsAcademy LMS < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure via render_quiz_answersCVE-2026-1040504.3 Medium
- kodezen llc academy lmsAcademy LMS < 4.0.0 - Subscriber+ Arbitrary Lesson Content Disclosure via Topic REST EndpointCVE-2026-1040494.3 Medium
- kodezen llc academy lmsAcademy LMS < 3.8.3 - Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST EndpointCVE-2026-165636.5 Medium
- kodezen llc academy lmsAcademy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST EndpointCVE-2026-123764.3 Medium
- kodezen llc academy lmsAcademy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDORCVE-2026-141845.4 Medium
- kodezen academy lmsAcademy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' ParameterCVE-2026-93414.3 Medium
- academylms academy lms proWordPress Academy LMS Pro plugin < 3.5.2 - Arbitrary File Upload vulnerabilityCVE-2026-395988.0 High
- kodezen llc academy lmsWordPress Academy LMS plugin <= 3.5.3 - Broken Access Control vulnerabilityCVE-2026-253726.5 Medium
- kodezen llc academy lmsWordPress Academy LMS plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-685276.5 Medium
- creativeitem academy lmsAcademy LMS 6.1 Arbitrary File Upload Vulnerability via Profile SettingsCVE-2023-538765.1 Medium
- kodezen llc academy lmsWordPress Academy LMS Plugin <= 3.3.4 - Insecure Direct Object References (IDOR) VulnerabilityCVE-2025-595625.5 Medium
- academy lms lms, kodezen academy lms +1 moreWordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerabilityCVE-2024-387014.3 Medium
- kodezen limited academy lmsWordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerabilityCVE-2024-372343.5 Low
- academy lms lms, kodezen academy lms +1 moreWordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerabilityCVE-2024-327144.3 Medium
- academy lms lms, kodezen academy lms +1 moreWordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerabilityCVE-2024-351715.3 Medium
- academy lms lms, kodezen academy lms +1 moreWordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerabilityCVE-2024-339127.1 High
- creativeitem academy lmsCreativeitem Academy LMS courses cross site scriptingCVE-2023-37523.5 Low