Unrated

Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak

CVE-2024-7786 First seen on SecPulse Sep 4, 2024

Original description The description as published by the source.

The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Key facts

Severity: Unrated
Published: Sep 4, 2024
First seen on SecPulse: Sep 4, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05