Vulnerabilities / Sensei LMS
Sensei LMS vulnerabilities
Advisories WPSec published for Sensei LMS – Online Courses, Quizzes, & Learning. Other sources may list more. Its attack surface: Sensei LMS on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0067 | Sensei LMS <= 4.26.3 - Authenticated (Subscriber+) Missing Authorization to Lesson Completion | Medium 4.3 | 4.26.4 |
| 2026-10-01 | WPSEC-2026-0066 | Sensei LMS <= 4.26.3 - Unauthenticated Sensitive Information Exposure via Private Messages | Medium 5.3 | 4.26.4 |
| 2026-10-01 | WPSEC-2026-0065 | Sensei LMS <= 4.26.3 - Unauthenticated Sensitive Information Exposure via Quiz Answer File Uploads | Medium 5.3 | 4.26.4 |
| 2026-10-01 | WPSEC-2026-0064 | Sensei LMS <= 4.26.3 - Authenticated (Teacher+) Missing Authorization to Lesson and Module Course Reassignment | Medium 4.3 | 4.26.4 |
| 2026-10-01 | WPSEC-2026-0063 | Sensei LMS <= 4.26.3 - Authenticated (Teacher+) Insecure Direct Object Reference to Arbitrary Post Overwrite via quiz_id | Medium 5.3 | 4.26.4 |
| 2026-10-01 | WPSEC-2026-0062 | Sensei LMS <= 4.26.3 - Unauthenticated Sensitive Information Exposure via Restricted Lesson Content | Medium 5.3 | 4.26.4 |
License: CC BY 4.0