kodezen records
5 published records for vendor kodezen.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 80%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-862 Missing Authorization2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-269 Improper Privilege Management1
- CWE-639 Authorization Bypass Through User-Controlled Key1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-1505No exploit | Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalationkodezen · academy lms · CWE-269 | High8.8 | — | 0.8% | Mar 13, 2024 |
35Monitor | CVE-2024-33912No exploit | WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerabilitykodezen · academy lms · CWE-862 | High8.8 | — | 0.4% | May 6, 2024 |
35Monitor | CVE-2024-38701No exploit | WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerabilitykodezen · academy lms · CWE-639 | High8.8 | — | 0.4% | Jul 22, 2024 |
35Monitor | CVE-2024-32714No exploit | WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerabilitykodezen · academy lms · CWE-862 | High8.8 | — | 0.3% | Jun 9, 2024 |
21Monitor | CVE-2024-35171No exploit | WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerabilitykodezen · academy lms · CWE-200 | Medium5.3 | — | 0.6% | May 14, 2024 |
- CVE-2024-150535Monitor
Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation
HighCVSS 8.8No exploitEPSS 1%kodezen · academy lmsMar 13, 2024
- CVE-2024-3391235Monitor
WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability
HighCVSS 8.8No exploitEPSS 0%kodezen · academy lmsMay 6, 2024
- CVE-2024-3870135Monitor
WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%kodezen · academy lmsJul 22, 2024
- CVE-2024-3271435Monitor
WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%kodezen · academy lmsJun 9, 2024
- CVE-2024-3517121Monitor
WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability
MediumCVSS 5.3No exploitEPSS 1%kodezen · academy lmsMay 14, 2024