CVE-2025-0466

Name of the Vulnerable Software and Affected Versions Sensei LMS WordPress plugin versions prior to 4.24.4

Description The issue concerns the inadequate protection of some REST API routes in the Sensei LMS WordPress plugin, allowing unauthenticated attackers to leak information related to sensei email and sensei message.

Recommendations For Sensei LMS WordPress plugin versions prior to 4.24.4, update to version 4.24.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable REST API routes until a patch is applied.