The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view