Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-35686 EUVD-2024-35445GHSA-9m8g-pqxr-x264

WordPress Sensei LMS plugin <= 4.23.1 - Broken Access Control vulnerability

Published Aug 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Automattic Sensei LMS, Automattic Sensei Pro (WC Paid Courses).This issue affects Sensei LMS: from n/a through 4.23.1; Sensei Pro (WC Paid Courses): from n/a through 4.23.1.1.23.1.

Affected products

VendorProductAffectedFixed
Automattic Sensei LMS ≤ 4.23.1 —
Automattic Sensei Pro (WC Paid Courses) ≤ 4.23.1.1.23.1 —

References