Skip to content
OpenAdvisories

Vendor

kodezen

24 known vulnerabilities.

Products

aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder 5 Academy LMS 5 Academy LMS – WordPress LMS Plugin for Complete eLearning Solution 4 StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More 3 aBlocks 3 Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning 3 Academy LMS Pro 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-110018

    aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute

    The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.17.0 via the `/ablocks/v1/form-builder/registration` RES…

    kodezen aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder Web / CMS
  • High 7.1
    CVE-2026-40804

    WordPress aBlocks plugin <= 2.16.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC aBlocks ablocks allows Reflected XSS.This issue affects aBlocks: from n/a through 2.16.0.

    kodezen aBlocks
  • High 8.8
    CVE-2026-57386

    WordPress aBlocks plugin < 2.9.1 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a before 2.9.1.

    kodezen aBlocks
  • High 8.0
    CVE-2026-39598

    WordPress Academy LMS Pro plugin < 3.5.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2.

    kodezen Academy LMS Pro
  • High 7.2
    CVE-2025-12099

    Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses'

    The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.8 via deserialization of untrusted input in the 'import_all_courses' function. This mak…

    kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution Web / CMS
  • High 8.8
    CVE-2025-9216 Public exploit

    StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload

    The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import() function in all versions up to, and incl…

    kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More Web / CMS
  • High 8.8
    CVE-2024-1505

    Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation

    The Academy LMS – eLearning and online course solution for WordPress plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.9.19. This is due to plugin allowing arbitrary user meta updates through the saved_user_inf…

    kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution Web / CMS