CVE-2026-112329 | Automattic Sensei LMS Plugin up to 4.26.3 on WordPress Legacy Message save_new_message post_id access control

October 19, 2026 Yanac

A vulnerability classified as critical was found in Automattic Sensei LMS Plugin up to 4.26.3 on WordPress. Impacted is the function save_new_message of the component Legacy Message Handler. The manipulation of the argument post_id results in improper access controls.

This vulnerability is cataloged as CVE-2026-112329. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More