← CVE Intelligence

CVE-2022-2034

Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API PUBLISHED

Description (CNA)

The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers

Affected (CNA)

Vendor / productVersions
Unknown / Sensei LMSaffected 0 before 4.5.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.