GCVE - cpe:2.3:a:automattic:sensei_lms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:automattic:sensei_lms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Automattic (`1dc39c9b-4ddb-5af6-acf4-410b436129a9`)
Product	Sensei Lms (`a423711e-fc00-5c58-a673-83d9fa5ced4a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/automattic/sensei`	purl2cpe	2026-06-01 10:14:42.580960

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-22740`	vulnerable	2026-06-03 14:59:41.310794	WordPress Sensei LMS plugin <= 4.24.4 - Broken Access Control vulnerability MEDIUM (5.3) Missing Authorization vulnerability in Automattic Sensei LMS sensei-lms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sensei LMS: from n/a through <= 4.24.4. Published: 2025-03-27T21:20:58.897Z Updated: 2026-04-28T16:11:06.125Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/sensei-lms/vulnerability/wordpress-sensei-lms-plugin-4-24-4-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7786`	vulnerable	2026-06-03 14:58:07.170602	Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates. Published: 2024-09-04T06:00:04.429Z Updated: 2025-08-27T12:00:45.823Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/f44e6f8f-3ef2-45c9-ae9c-9403305a548a/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35686`	vulnerable	2026-06-03 14:56:02.761259	WordPress Sensei LMS plugin <= 4.23.1 - Broken Access Control vulnerability MEDIUM (5.3) Missing Authorization vulnerability in Automattic Sensei LMS, Automattic Sensei Pro (WC Paid Courses).This issue affects Sensei LMS: from n/a through 4.23.1; Sensei Pro (WC Paid Courses): from n/a through 4.23.1.1.23.1. Published: 2024-08-18T21:54:35.348Z Updated: 2026-04-28T16:09:53.111Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/sensei-lms/wordpress-sensei-lms-plugin-4-23-1-broken-access-control-vulnerability?_s_id=cve https://patchstack.com/database/vulnerability/woothemes-sensei/wordpress-sensei-pro-wc-paid-courses-plugin-4-23-1-1-23-1-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.