Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-0466

Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message Information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Sensei LMS

Default version status: unaffected

  • 0 to < 4.24.4affected

References