What’s Vulnerable › Products
kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution vulnerabilities
9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Latest kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution vulnerabilities
- CVE-2026-9341 — Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' Parameter (CVSS 4.3)
- CVE-2026-5348 — Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure (CVSS 5.3)
- CVE-2025-15521 — Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover (CVSS 9.8)
- CVE-2025-12099 — Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses' (CVSS 7.2)
- CVE-2024-38701 — WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability (CVSS 8.8)
- CVE-2024-32714 — WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability (CVSS 8.8)
- CVE-2024-35171 — WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- CVE-2024-33912 — WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability (CVSS 8.8)
- CVE-2024-1505 — Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8)