CVE-2026-112328
Sensei LMS 4.26.4 Broken Access Control via add_new_module_term AJAX
CVSS score
5.3
EPSS probability
%0.2
Risk score
0.0
Published
1 d ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
No verified news item has been matched to this CVE yet.
Similar Vulnerabilities
9.8
CVE-2023-28121Improper authentication in Automattic Woocommerce Payments
Patch status unknown Public Exploits:11EPSS %87
4.9
CVE-2024-1310Vulnerability in Automattic Woocommerce
Patch status unknown Public Exploits:1EPSS %1
7.5
CVE-2026-4338Vulnerability in Automattic Activitypub
Patch status unknownEPSS %0
7.1
CVE-2026-93485WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability
Patch status unknown Public Exploits:4EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-112328"