CVE-2024-7786

Description

The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.

Reserved 2024-08-14 | Published 2024-09-04 | Updated 2024-09-04 | Assigner WPScan

Problem types

CWE-200 Information Exposure

Product status

Default status
unaffected

Any version before 4.24.2
affected

Credits

Sushmita Poudel finder

WPScan coordinator

References

wpscan.com/...rability/f44e6f8f-3ef2-45c9-ae9c-9403305a548a/ exploit vdb-entry technical-description

cve.org (CVE-2024-7786)

nvd.nist.gov (CVE-2024-7786)

Download JSON