CVE-2024-8009

Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure

The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page

Affected

Sensei LMS

CVSS v3.1 CNA

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.40% chance of exploitation in the next 30 days, 33rd percentile

Published

2025-05-15

Updated

2025-11-13

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/737bb010-b2fa-4bf4-b124-5fbba67cf935/

Security advisories

• https://wpscan.com/vulnerability/737bb010-b2fa-4bf4-b124-5fbba67cf935

References

• CVE Record
• NVD entry