7.5
Élevée
CVE-2024-7786 The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing…
Description
The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sensei LMS 4.24 | premières → < 4.24.2 | 4.24.2 |
| sensei_lms 4.24 | premières → < 4.24.2 | 4.24.2 |
Autres CVE de Sensei LMS
Les 4 CVE de Sensei LMS →
CVE-2024-8009
The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to…
4.3
Moyenne
CVE-2025-0466
The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing…
5.3
Moyenne
CVE-2022-2034
The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint,…
Non notée