The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/737bb010-b2fa-4bf4-b124-5fbba67cf935/ | Exploit Third Party Advisory |
Configurations
History
11 Jun 2025, 16:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/737bb010-b2fa-4bf4-b124-5fbba67cf935/ - Exploit, Third Party Advisory | |
| First Time |
Automattic
Automattic sensei Lms |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:automattic:sensei_lms:*:*:*:*:*:wordpress:*:* |
15 May 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-15 20:15
Updated : 2025-06-11 16:14
NVD link : CVE-2024-8009
Mitre link : CVE-2024-8009
JSON object : View
Products Affected
automattic
- sensei_lms
CWE