CVE-2025-0466

Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure PUBLISHED

Description (CNA)

The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message Information.

Affected (CNA)

Vendor / product	Versions
Unknown / Sensei LMS	affected 0 before 4.24.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/53ab86dc-1195-4ba0-8eda-6a0d7b45c45f/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.