KO
Vendor
kodezen
18
CVEs
0
On KEV
3
New 30D
Products
AL6.5
Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning
kodezen
2 CVEs0 on KEV2 new
AG8.8
aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder
kodezen
3 CVEs0 on KEV1 new
AL8.8
Academy LMS
kodezen
6 CVEs0 on KEV0 new
AL9.8
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution
kodezen
4 CVEs0 on KEV0 new
SC8.8
StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More
kodezen
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110018 New | AG aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder kodezen | 8.8 | Oct 24 | aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute |
| CVE-2026-104022 | AL Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning kodezen | 5.4 | Oct 10 | Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_child REST endpoint |
| CVE-2026-104915 | AL Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning kodezen | 6.5 | Oct 10 | Academy LMS <= 4.0.3 - Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion via delete_lesson_comment AJAX — Attacker-Controlled course_id vs. Target comment_id |
| CVE-2026-15056 | SC StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More kodezen | 6.5 | Aug 16 | StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL |
| CVE-2026-9341 | AL Academy LMS kodezen | 4.3 | Jul 14 | Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' Parameter |
| CVE-2026-5348 | AL Academy LMS – WordPress LMS Plugin for Complete eLearning Solution kodezen | 5.3 | Jul 2 | Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure |
| CVE-2025-15521 | AL Academy LMS – WordPress LMS Plugin for Complete eLearning Solution kodezen | 9.8 | Jan 21 | Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover |
| CVE-2025-12449 | AG aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder kodezen | 5.4 | Jan 7 | aBlocks – WordPress Gutenberg Blocks <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Settings Modification |
| CVE-2025-12099 | AL Academy LMS – WordPress LMS Plugin for Complete eLearning Solution kodezen | 7.2 | Nov 8 | Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses' |
| CVE-2025-9216 | SC StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More kodezen | 8.8 | Sep 17 | StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2025-9215 | SC StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More kodezen | 6.5 | Sep 17 | StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download |
| CVE-2024-13465 | AG aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder kodezen | 5.4 | Feb 18 | aBlocks – WordPress Gutenberg Blocks <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-38701 | AL Academy Lms Kodezen | 8.8 | Jul 22 | WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability |
| CVE-2024-32714 | AL Academy Lms Kodezen | 8.8 | Jun 9 | WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability |
| CVE-2024-35171 | AL Academy Lms Kodezen | 5.3 | May 13 | WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability |
| CVE-2024-33912 | AL Academy Lms Kodezen | 8.8 | May 6 | WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability |
| CVE-2024-1505 | AL Academy LMS – WordPress LMS Plugin for Complete eLearning Solution kodezen | 8.8 | Mar 13 | Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation |