agentprime: kodezen-academy-lms-ai-course-builder-quizzes-certificates-elearningEvery new CVE for kodezen-academy-lms-ai-course-builder-quizzes-certificates-elearning.https://agentprime.io/CVE-2026-120544: Academy LMS <= 4.0.1 - Authenticated (Contributor+) Arbitrary HTML File Read via 'id' Parameter in /wp/v2/templates REST Routehttps://agentprime.io/advisories/CVE-2026-120544/https://agentprime.io/advisories/CVE-2026-120544/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 04:43:06 GMTCVECVE-2026-104022: Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_child REST endpointhttps://agentprime.io/advisories/CVE-2026-104022/https://agentprime.io/advisories/CVE-2026-104022/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 02:26:31 GMTCVECVE-2026-104915: Academy LMS <= 4.0.3 - Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion via delete_lesson_comment AJAX — Attacker-Controlled course_id vs. Target comment_idhttps://agentprime.io/advisories/CVE-2026-104915/https://agentprime.io/advisories/CVE-2026-104915/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 02:26:30 GMTCVE