4.3
Medium
CVE-2024-8009 The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to…
Description
The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sensei LMS 4.20 | earliest → < 4.20.0 | 4.20.0 |
Other CVEs of Sensei LMS
The 4 CVEs of Sensei LMS →
CVE-2025-0466
The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing…
5.3
Medium
CVE-2024-7786
The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing…
7.5
High
CVE-2022-2034
The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint,…
Not rated