kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

• CVE-2026-5348 Medium 5.3 Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure 0.5%
• CVE-2025-15521 Critical 9.8 Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover 0.4%
• CVE-2025-12099 High 7.2 Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses' 0.6%
• CVE-2024-1505 High 8.8 Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation 0.8%