7.5
CVE-2024-7786
- EPSS 32.77%
- Published 04.09.2024 06:15:17
- Last modified 07.10.2024 17:46:08
- Source contact@wpscan.com
- Teams watchlist Login
- Open Login
The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.
Data is provided by the National Vulnerability Database (NVD)
Automattic ≫ Sensei Lms SwPlatformwordpress Version < 4.24.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 32.77% | 0.967 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|