WordPress Sensei LMS plugin < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure vulnerability

Unauthenticated senseiemail/senseimessage Disclosure vulnerability discovered by Li Xuhang in WordPress Plugin Sensei LMS versions 4.24.4...

CVE-2025-0466: Undefined Security Weakness

The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak senseiemail and senseimessage Information...