medium5.3
CVE-2022-2034
The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private…
Impact
The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Automattic | Sensei Lms | before 4.5.0 |