Skip to content
OpenAdvisories

Vendor

higheredlab

1 known vulnerabilities.

Products

HEL Online Classroom: AI-powered Online Classrooms 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-6708

    HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Classroom Deletion via 'id' Parameter

    The HEL Online Classroom: AI-powered Online Classrooms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.3. This is due to a missing capability check on a REST API endpoint registered with a permission_callb…

    higheredlab HEL Online Classroom: AI-powered Online Classrooms Web / CMS