5.3
Medium
CVE-2024-35686 Missing Authorization vulnerability in Automattic Sensei LMS, Automattic Sensei Pro (WC Paid Courses).This issue affects…
Description
Missing Authorization vulnerability in Automattic Sensei LMS, Automattic Sensei Pro (WC Paid Courses).This issue affects Sensei LMS: from n/a through 4.23.1; Sensei Pro (WC Paid Courses): from n/a through 4.23.1.1.23.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sensei LMS 4.23 | earliest → 4.23.1 | No fix stated |
| Sensei Pro (WC Paid Courses) 4.23 | earliest → 4.23.1.1.23.1 | No fix stated |
| sensei_pro 4.23 | earliest → 4.23.1.1.23.1 | No fix stated |
| sensei_lms 4.23 | earliest → 4.23.1 | No fix stated |
Other CVEs of Sensei LMS
The 4 CVEs of Sensei LMS →
CVE-2026-112329
The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy…
5.3
Medium
CVE-2026-112328
The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the…
5.3
Medium
CVE-2025-22740
Missing Authorization vulnerability in Automattic Sensei LMS sensei-lms allows Exploiting Incorrectly Configured…
5.3
Medium