← Database

CVE-2022-2034

MEDIUM CVSS: 5.3 Published: 2022-08-29 Modified: 2026-06-17

Description

The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers

Affected Platforms

Automattic Sensei Lms

Weakness Type

CWE-639

References