Unknown Sensei LMS vulnerabilities

4 vulnerabilities

Known vulnerabilities in Unknown Sensei LMS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2025-0466automatticsensei lms+2
EPSS score
0.43%
The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message Information.5.3CVE-2022-2034automatticsensei lms+2
EPSS score
2.53%
The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers7.5CVE-2024-7786automatticsensei lms+2
EPSS score
1.75%
The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.5.3CVE-2024-8009automatticsensei lms+2
EPSS score
0.40%
The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page