Plugin icon

Sensei LMS – Online Courses, Quizzes, & Learning

sensei-lms

Vulnerabilities:

8

Last Updated:

December 16, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-03-27
Title
Sensei LMS < 4.24.5 - Missing Authorization
Fixed in
Fixed in 4.24.5
CVSS
5.3 (medium)
Published
2025-01-14
Title
Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure
Fixed in
Fixed in 4.24.4
CVSS
5.3 (medium)
Published
2024-08-14
Title
Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak
Fixed in
Fixed in 4.24.2
CVSS
5.3 (medium)
Published
2024-06-06
Title
Sensei LMS <= 4.23.1 & Sensei Pro (WC Paid Courses) <= 4.24.0.1.24.0 - Unauthenticated Rewrite Rules Flushing
Fixed in
Fixed in 4.24.0
CVSS
5.3 (medium)
Published
2023-12-22
Title
Sensei LMS < 4.18.0 - Contributor+ Stored XSS
Fixed in
Fixed in 4.18.0
CVSS
5.9 (medium)
Published
2023-12-14
Title
Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure
Fixed in
Fixed in 4.20.0
CVSS
4.3 (medium)
Published
2022-08-04
Title
Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR
Fixed in
Fixed in 4.5.2
CVSS
3.1 (low)
Published
2022-08-04
Title
Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API
Fixed in
Fixed in 4.5.0
CVSS
5.3 (medium)