Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:sensei_lms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSensei Lms (aaab616d-f855-5dc7-a0e2-1d05f146b746)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0466 vulnerable 2026-06-08 07:02:24.647381 Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure
The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message Information.
Published: 2025-02-04T06:00:11.861Z
Updated: 2025-08-27T12:00:27.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8009 vulnerable 2026-06-08 06:58:24.112650 Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure
The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page
Published: 2025-05-15T20:09:47.142Z
Updated: 2025-11-13T20:58:53.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7786 vulnerable 2026-06-08 06:58:23.425808 Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak
The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.
Published: 2024-09-04T06:00:04.429Z
Updated: 2025-08-27T12:00:45.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2034 vulnerable 2026-06-08 05:42:50.123628 Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API
The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers
Published: 2022-08-29T14:40:26.000Z
Updated: 2024-08-03T00:24:43.797Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.