Vulnerability CVE-2022-2034
Published: 2022-08-29

Description:
The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers

Type:

CWE-862

 (Missing Authorization)

 References:
https://hackerone.com/reports/1590237
https://wpscan.com/vulnerability/aba3dd58-7a8e-4129-add5-4dd5972c0426
Copyright 2026, cxsecurity.com

 

Back to Top