WordPress security by component

Sensei LMS

Plugin description

Sensei LMS is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published May 15, 2025; the highest CVE/CNA score is 7.5.

Plugin slug: sensei-lms

Latest vulnerability

CVE-2024-8009: Sensei LMS: A security weakness

Sensei LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedMay 15, 2025

Safe version guidanceSee mitigation notes

		Safe version
May 15, 2025	CVE-2024-8009 Sensei LMS: A security weakness Sensei LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVDPending
Mar 27, 2025	CVE-2025-22740 Sensei LMS: A security weakness Sensei LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Feb 04, 2025	CVE-2025-0466 Sensei LMS: A security weakness Sensei LMS is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Sep 04, 2024	CVE-2024-7786 Sensei LMS: A security weakness Sensei LMS is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE7.5 NVD5.3
Aug 18, 2024	CVE-2024-35686 Sensei LMS: A security weakness Sensei LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Feb 12, 2024	CVE-2023-50875 Sensei LMS – Online Courses, Quizzes, & Learning: Cross-site scripting Sensei LMS – Online Courses, Quizzes, & Learning is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.5 NVD5.4
Aug 29, 2022	CVE-2022-2080 Sensei LMS: A security weakness Sensei LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVD4.3
Aug 29, 2022	CVE-2022-2034 Sensei LMS: A security weakness Sensei LMS is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVD5.3