The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message Information.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/53ab86dc-1195-4ba0-8eda-6a0d7b45c45f/ | Exploit Third Party Advisory |
Configurations
History
13 May 2025, 18:50
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:automattic:sensei_lms:*:*:*:*:*:wordpress:*:* | |
| First Time |
Automattic
Automattic sensei Lms |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://wpscan.com/vulnerability/53ab86dc-1195-4ba0-8eda-6a0d7b45c45f/ - Exploit, Third Party Advisory |
04 Feb 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-04 06:15
Updated : 2025-05-13 18:50
NVD link : CVE-2025-0466
Mitre link : CVE-2025-0466
JSON object : View
Products Affected
automattic
- sensei_lms
CWE