Lucene search

K
cvelistWPScanCVELIST:CVE-2024-7786
HistorySep 04, 2024 - 6:00 a.m.

CVE-2024-7786 Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak

2024-09-0406:00:04
WPScan
www.cve.org
3
sensei lms
plugin
unauthenticated
email
template
leak
cve-2024-7786
wordpress
rest api

EPSS

0.001

Percentile

22.2%

The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Sensei LMS",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "4.24.2"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

EPSS

0.001

Percentile

22.2%

Related for CVELIST:CVE-2024-7786