Skip to content
Sign in Sign up
JA EN FR
SecPulse
Unrated

Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API

CVE-2022-2034 First seen on SecPulse
Original description The description as published by the source.

The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details