What’s Vulnerable › Products

Sensei LMS vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Sensei LMS version is affected

Latest Sensei LMS vulnerabilities

• CVE-2026-112329 — Sensei LMS 4.26.4 Broken Access Control via save_new_message (CVSS 4.3)
• CVE-2026-112328 — Sensei LMS 4.26.4 Broken Access Control via add_new_module_term AJAX (CVSS 4.3)
• CVE-2024-8009 — Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure (CVSS 4.3)
• CVE-2025-22740 — WordPress Sensei LMS plugin <= 4.24.4 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-0466 — Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure (CVSS 5.3)
• CVE-2024-7786 — Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak (CVSS 5.3)
• CVE-2024-35686 — WordPress Sensei LMS plugin <= 4.23.1 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2023-50875 — WordPress Sensei LMS Plugin <= 4.17.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2022-2080 — Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR (CVSS 4.3)
• CVE-2022-2034 — Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API (CVSS 5.3)