PatchTheCVEsensei lms vulnerabilities and fixes
Recent CVEs affecting sensei lms, with upgrade or downgrade steps. 2 tracked.
Also searched as: senseilms.
sensei lms has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-05-15. Highest priority: CVE-2024-7786 (score 48/100).
- CVE-2024-8009 MEDIUM 4.3 UPGRADE The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to
- CVE-2024-7786 MEDIUM 5.3 UPGRADE The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing un
FAQ
How do I fix sensei lms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sensei lms being exploited right now?
None of the tracked sensei lms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sensei lms CVE should I patch first?
CVE-2024-7786 currently ranks highest (48/100): The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing un.