Advisories · Technology
kodezen Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning.
Every CVE that names kodezen Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Academy LMS <= 4.0.1 - Authenticated (Contributor+) Arbitrary HTML File Read via 'id' Parameter in /wp/v2/templates REST Route
- kodezen Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning
- Path traversal
- CVSS 5.4 Medium
Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_child REST endpoint
- kodezen Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning
- Privilege escalation
- CVSS 6.5 Medium
Academy LMS <= 4.0.3 - Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion via delete_lesson_comment AJAX — Attacker-Controlled course_id vs. Target comment_id
- kodezen Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning
- Broken access control