Kodezen LLC

Products

ProductCVEsExploitedLatest
aBlocks3–Oct 8, 2026
Academy LMS3–Feb 19, 2026
Academy LMS Pro1–Jun 16, 2026

Exploited and recent CVEs

  • CVE-2026-40804 High 7.1 WordPress aBlocks plugin <= 2.16.0 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-57386 High 8.8 WordPress aBlocks plugin < 2.9.1 - Privilege Escalation vulnerability 0.4%
  • CVE-2026-39598 High 8.0 WordPress Academy LMS Pro plugin < 3.5.2 - Arbitrary File Upload vulnerability 0.2%
  • CVE-2026-25372 Medium 6.5 WordPress Academy LMS plugin <= 3.5.3 - Broken Access Control vulnerability 0.2%
  • CVE-2025-68527 Medium 6.5 WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-59562 Medium 5.5 WordPress Academy LMS Plugin <= 3.3.4 - Insecure Direct Object References (IDOR) Vulnerability 0.4%
  • CVE-2025-47616 Medium 6.5 WordPress aBlocks plugin <= 1.9.2 - Cross Site Scripting (XSS) Vulnerability 0.3%