kodezen
- Total products in the ecosystem
- 5
- Total vulnerabilities (90 days)
- 4
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/25/2026, kodezen recorded 4 security vulnerabilities in the last 90 days across 3 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning had the most security vulnerabilities in the kodezen ecosystem, with 2 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-110018aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block AttributeCVE-2026-104022Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_child REST endpointCVE-2026-104915Academy LMS <= 4.0.3 - Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion via delete_lesson_comment AJAX — Attacker-Controlled course_id vs. Target comment_idCVE-2026-15056StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URLCVE-2026-9341Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' Parameter17 Results | Page 1 of 2
| SeverityMedium |
| Published10/10/2026 |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityCritical |
| SeverityMedium |
| SeverityHigh |
| Published09/17/2025 |
| SeverityHigh |