Unrated

Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure

CVE-2025-0466 First seen on SecPulse Feb 4, 2025

Original description The description as published by the source.

The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message Information.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Key facts

Severity: Unrated
Published: Feb 4, 2025
First seen on SecPulse: Feb 4, 2025

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05