K
Vendor security profile
kodezen
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS5.9
12-month vulnerability rate
0
0
1
0
0
0
0
0
0
1
0
2
CVE KEV
CVE severity distribution
4toplam CVE
Medium4 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
5.4
CVE-2026-104022
Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_child REST endpoint
K
Patch status unknownEPSS %0
6.5
CVE-2026-104915
Academy LMS <= 4.0.3 - Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion via delete_lesson_comment AJAX — Attacker-Controlled course_id vs. Target comment_id
K
Patch status unknownEPSS %0
7.1
CVE-2026-40804
WordPress aBlocks plugin <= 2.16.0 - Cross Site Scripting (XSS) vulnerability
KL
Patch status unknownEPSS %0
6.5
CVE-2026-15056
StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL
K
Patch status unknownEPSS %1
5.4
CVE-2025-12449
aBlocks – WordPress Gutenberg Blocks <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Settings Modification
K
Patch status unknownEPSS %0