CVE-2022-2034

概要

参考情報

• hackerone.com/reports/1590237 · Exploit
• wpscan.com/vulnerability/aba3dd58-7a8e-4129-add5-4dd5972c0426 · Exploit

sensei lms のその他の脆弱性

• CVE-2024-8009中 4.3The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page
• CVE-2025-0466中 5.3The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak…
• CVE-2024-7786中 5.3The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to lea…
• CVE-2023-50875中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic Sensei LMS – Online Courses…
• CVE-2022-2080中 4.3The Sensei LMS WordPress plugin before 4.5.2 does not ensure that the sender of a private message is either the teacher or the original send…