Advisories · Technology
kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution.
Every CVE that names kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure
- kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover
- kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution
- Broken access control
- CVSS 7.2 High
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses'
- kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution
- Insecure deserialization
- CVSS 8.8 High
Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation
- kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution
- Privilege escalation