Lucene search
WpvulndbWPVDB-ID:651E94E0-A065-4855-8142-82AEA4A6E201HistoryJun 12, 2024 - 12:00 a.m.
Sensei LMS <= 4.23.1 & Sensei Pro (WC Paid Courses) <= 4.24.0.1.24.0 - Missing Authorization
2024-06-1200:00:00
wpscan.com
2
sensei lms
sensei pro
wordpress
authorization
vulnerability
data modification
capability check
unauthenticated attackers
Description The Sensei LMS and Sensei Pro (WC Paid Courses) plugins for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flush_rewrite_rules() function in versions up to, and including, 4.23.1 and . 4.24.0.1.24.0 respectively. This makes it possible for unauthenticated attackers to flush rewrite rules.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 4.24.0 |
Related
wordfence
wordfence
6.4 Medium
AI Score
Confidence
Low
0 Low
EPSS
Percentile
0.0%
Related for WPVDB-ID:651E94E0-A065-4855-8142-82AEA4A6E201