Medium · 4.3 CVE-2024-8009 EUVD-2025-15249GHSA-v45r-44c3-w45r

Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure

Published May 15, 2025 · Updated Nov 13, 2025 · Assigned by WPScan

Description

The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page

Vendor	Product	Affected	Fixed
—	Sensei LMS	< 4.20.0	4.20.0