5.3
Medium
CVE-2025-22740 Missing Authorization vulnerability in Automattic Sensei LMS sensei-lms allows Exploiting Incorrectly Configured…
Description
Missing Authorization vulnerability in Automattic Sensei LMS sensei-lms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sensei LMS: from n/a through <= 4.24.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sensei LMS 4.24 | earliest → 4.24.4 | No fix stated |
Other CVEs of Sensei LMS
The 4 CVEs of Sensei LMS →
CVE-2026-112329
The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy…
5.3
Medium
CVE-2026-112328
The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the…
5.3
Medium
CVE-2024-35686
Missing Authorization vulnerability in Automattic Sensei LMS, Automattic Sensei Pro (WC Paid Courses).This issue affects…
5.3
Medium