VendorsAutomatticsensei_lmsall versions
Vulnerabilities

Automattic Sensei LMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2024-7786
Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak
Published 2024-09-04 · Analyzed
7.5EPSS 0.017
CVE-2023-50875
WordPress Sensei LMS Plugin <= 4.17.0 is vulnerable to Cross Site Scripting (XSS)
Published 2024-02-12 · Modified
6.5EPSS 0.003
CVE-2022-2034
Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API
Published 2022-08-29 · Modified
5.3EPSS 0.025
CVE-2025-0466
Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure
Published 2025-02-04 · Analyzed
5.3EPSS 0.004
CVE-2022-2080
Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR
Published 2022-08-29 · Modified
4.3EPSS 0.008
CVE-2024-8009
Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure
Published 2025-05-15 · Modified
4.3EPSS 0.004