CVE-2024-7786

Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak PUBLISHED

Description (CNA)

The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.

Affected (CNA)

Vendor / product	Versions
Unknown / Sensei LMS	affected 0 before 4.24.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/f44e6f8f-3ef2-45c9-ae9c-9403305a548a/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.