Lucene search
Veshraj GhimirePATCHSTACK:C361B9FA50CBC1407E159A196B550802HistoryAug 04, 2022 - 12:00 a.m.
WordPress Sensei LMS plugin <= 4.5.1 - Arbitrary Private Message Sending via IDOR vulnerability
2022-08-0400:00:00
Veshraj Ghimire
patchstack.com
13
0.001 Low
EPSS
Percentile
21.6%
Arbitrary Private Message Sending via IDOR vulnerability discovered by Veshraj Ghimire in WordPress Sensei LMS plugin (versions <= 4.5.1).
Solution
Update the WordPress Sensei LMS plugin to the latest available version (at least 4.5.2).
| CPE | Name | Operator | Version |
|---|---|---|---|
| sensei lms | le | 4.5.1 |
References
Related
wpexploit
wpexploit
Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR
2022-08-04 00:00:00
prion
prion
Design/Logic Flaw
2022-08-29 18:15:00
wpvulndb
wpvulndb
Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR
2022-08-04 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-2080
2022-08-29 18:15:09
cve
cve
CVE-2022-2080
2022-08-29 18:15:09