← All advisories

Medium severity4.3NVD Advisory· Published May 15, 2025· Updated Jun 17, 2026

CVE-2024-8009

CVE-2024-8009

Description

The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/Sensei Lmsllm-fuzzy2 versions
<4.20.0+ 1 more
- (no CPE)range: <4.20.0
- (no CPE)
Package: https://wordpress.org/plugins/sensei-lms
Automattic/Sensei Lms
cpe:2.3:a:automattic:sensei_lms:*:*:*:*:*:wordpress:*:*
Range: <4.20.0

Patches

Vulnerability mechanics

References

1

wpscan.com/vulnerability/737bb010-b2fa-4bf4-b124-5fbba67cf935/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.