Product by Automattic
Automattic Sensei LMS
10 known vulnerabilities in Automattic Sensei LMS (Automattic), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2022-2034 | Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API | 5.3 | |
| High | CVE-2024-7786 | Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak | 5.3 | |
| Medium | CVE-2026-112329 | Sensei LMS 4.26.4 Broken Access Control via save_new_message | 4.3 | |
| Medium | CVE-2026-112328 | Sensei LMS 4.26.4 Broken Access Control via add_new_module_term AJAX | 4.3 | |
| Medium | CVE-2024-35686 | WordPress Sensei LMS plugin <= 4.23.1 - Broken Access Control vulnerability | 5.3 | |
| Medium | CVE-2022-2080 | Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR | 4.3 | |
| Medium | CVE-2025-0466 | Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure | 5.3 | |
| Medium | CVE-2023-50875 | WordPress Sensei LMS Plugin <= 4.17.0 is vulnerable to Cross Site Scripting (XSS) | 6.5 | |
| Medium | CVE-2024-8009 | Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure | 4.3 | |
| Medium | CVE-2025-22740 | WordPress Sensei LMS plugin <= 4.24.4 - Broken Access Control vulnerability | 5.3 |