The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page
2025-05-15T20:15:57.260
2025-06-11T16:14:04.737
Analyzed
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | automattic | sensei_lms | < 4.20.0 | Yes |