Description
The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message Information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Sensei LMS | < 4.24.4 | 4.24.4 |
References
- https://wpscan.com/vulnerability/53ab86dc-1195-4ba0-8eda-6a0d7b45c45f/ exploit vdb-entry technical-description