Kodezen

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 16
    Known Exploited: 0
    1
    Critical Level Threats
    4
    High Level Threats
    11
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-104022

    Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_child REST endpoint

    Last Modified: Oct 20, 2026
    Published: Oct 10, 2026

    CVE-2026-104915

    Academy LMS <= 4.0.3 - Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion via delete_lesson_comment AJAX — Attacker-Controlled course_id vs. Target comment_id

    Last Modified: Oct 20, 2026
    Published: Oct 10, 2026

    CVE-2026-15056

    StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL

    Last Modified: Aug 17, 2026
    Published: Aug 16, 2026

    CVE-2026-9341

    Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' Parameter

    Last Modified: Jul 14, 2026
    Published: Jul 14, 2026

    CVE-2026-57386

    WordPress aBlocks plugin < 2.9.1 - Privilege Escalation vulnerability

    Last Modified: Oct 26, 2026
    Published: Jul 13, 2026
    Items Per Page