CVE-2025-22740
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Mar 27, 2025
Updated: Mar 28, 2025
CWE ID 862
Summary
CVE-2025-22740 is a critical vulnerability affecting Automattic Sensei Learning Management System (LMS). The issue lies in the missing authorization checks, which enable unauthorized access. Malicious actors can exploit this vulnerability when access control security levels are incorrectly configured, leading to potential security breaches. Sensei LMS versions from n/a to 4.24.4 are reportedly affected by this flaw.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.