Unknown Hel Online Classroom: Ai-Powered Online Classrooms vulnerabilities

3 CVEs affecting Unknown Hel Online Classroom: Ai-Powered Online Classrooms, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-77010, published 2026-08-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-77007, published 2026-08-29. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation check on one of its REST API routes, allowing unauthenticated users to…
CVE-2026-77008, published 2026-08-29. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, allowing unauthenticated users…
CVE-2026-77010, published 2026-08-29. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class…