Skip to content
OpenAdvisories

Vendor

kodezen

24 known vulnerabilities.

Products

aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder 5 Academy LMS 5 Academy LMS – WordPress LMS Plugin for Complete eLearning Solution 4 StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More 3 aBlocks 3 Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning 3 Academy LMS Pro 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-15521 Public exploit

    Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover

    The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.5.0. This is due to the plugin not properly validating a user's iden…

    kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution Web / CMS
  • High 8.8
    CVE-2025-9216 Public exploit

    StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload

    The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import() function in all versions up to, and incl…

    kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More Web / CMS
  • Medium 6.5
    CVE-2025-9215 Public exploit

    StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download

    The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the file_download() function. This makes it possible…

    kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More Web / CMS