Lucene search
+L

5231 matches found

NVD
NVD
•added 2025/12/30 11:15 a.m.•15 views

CVE-2025-68982

Missing Authorization vulnerability in designthemes DesignThemes LMS Addon designthemes-lms-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes LMS Addon: from n/a through = 2.6...

5.3CVSS0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/30 10:47 a.m.•43 views

CVE-2025-68982 WordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in designthemes DesignThemes LMS Addon designthemes-lms-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes LMS Addon: from n/a through = 2.6...

5.3CVSS0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/30 10:47 a.m.•7 views

CVE-2025-68982 WordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in designthemes DesignThemes LMS Addon designthemes-lms-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes LMS Addon: from n/a through = 2.6...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/30 10:47 a.m.•20 views

CVE-2025-68982

CVE-2025-68982 involves a Missing Authorization vulnerability in the DesignThemes LMS Addon (designthemes-lms-addon). Public sources identify the issue as Incorrectly Configured Access Control Security Levels affecting DesignThemes LMS Addon up to version 2.6. The connected Wordfence vulnerabilit...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/30 1:09 a.m.•23 views

WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Academy LMS versions = 3.4.0...

5.4CVSS6.1AI score0.00164EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•3 views

CVE-2025-68982: Missing Authorization

Missing Authorization vulnerability in designthemes DesignThemes LMS Addon designthemes-lms-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes LMS Addon: from n/a through = 2.6...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/12/26 3:22 p.m.•267 views

Exploit for Missing Authorization in Themeum Tutor_Lms

CVE-2024-3553 Tutor LMS Example Output =====...

6.5CVSS6.9AI score0.00462EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•19 views

CVE-2025-68527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kodezen LLC Academy LMS academy allows Stored XSS.This issue affects Academy LMS: from n/a through = 3.4.0...

6.5CVSS6AI score0.00164EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•23 views

EUVD-2025-205195

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kodezen LLC Academy LMS academy allows Stored XSS.This issue affects Academy LMS: from n/a through = 3.4.0...

5.4CVSS5.5AI score0.00164EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/24 1:16 p.m.•17 views

CVE-2025-68527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kodezen LLC Academy LMS academy allows Stored XSS.This issue affects Academy LMS: from n/a through = 3.4.0...

6.5CVSS0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 12:31 p.m.•53 views

CVE-2025-68527 WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kodezen LLC Academy LMS academy allows Stored XSS.This issue affects Academy LMS: from n/a through = 3.4.0...

6.5CVSS0.00164EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 12:31 p.m.•42 views

CVE-2025-68527

CVE-2025-68527 affects the WordPress plugin Academy LMS (Academy LMS) up to version

6.5CVSS5.8AI score0.00164EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/24 12:31 p.m.•9 views

CVE-2025-68527 WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kodezen LLC Academy LMS academy allows Stored XSS.This issue affects Academy LMS: from n/a through = 3.4.0...

6.5CVSS5.8AI score0.00164EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•21 views

WordPress plugin Academy LMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS5.9AI score0.00164EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•25 views

PT-2025-53092

Name of the Vulnerable Software and Affected Versions Kodezen LLC Academy LMS versions through 3.4.0 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a Stored Cross-site Scripting XSS condition. This allows an attacker to...

6.5CVSS5.8AI score0.00164EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•6 views

CVE-2025-68527: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kodezen LLC Academy LMS academy allows Stored XSS.This issue affects Academy LMS: from n/a through = 3.4.0...

6.5CVSS5.8AI score0.00164EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/19 7:32 a.m.•18 views

CVE-2025-64270

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo - LMS: from n/a through = 2.0.3...

6.5CVSS6.9AI score0.00321EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 7:32 a.m.•16 views

CVE-2025-64214

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MasterStudy LMS Pro: from n/a through 4.7.16...

7.5CVSS7AI score0.00356EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/12/18 6:18 p.m.•321 views

Exploit for CVE-2025-14156

CVE-2025-14156 Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5...

9.8CVSS7AI score0.06811EPSS
SaveExploits1
Patchstack
Patchstack
•added 2025/12/18 12:50 p.m.•20 views

WordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin DesignThemes LMS Addon versions = 2.6...

8.1CVSS7AI score0.00254EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder