CVE-2024-35686: Automattic Sensei Lms

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Automattic Sensei LMS, Automattic Sensei Pro (WC Paid Courses).This issue affects Sensei LMS: from n/a through 4.23.1; Sensei Pro (WC Paid Courses): from n/a through 4.23.1.1.23.1.

Affected products

• Automattic Sensei Lms: up to and including 4.23.1
• Automattic Sensei Pro: up to and including 4.23.1.1.23.1
• Automattic Sensei Pro Wc Paid Courses: up to and including 4.23.1.1.23.1

Published 2024-08-18. Last modified 2026-06-17.