Sensei LMS <= 4.23.1 & Sensei Pro (WC Paid Courses) <= 4.24.0.1.24.0 - Unauthenticated Rewrite Rules Flushing

Description

The Sensei LMS and Sensei Pro (WC Paid Courses) plugins are vulnerable to unauthorized modification of data due to a missing capability check on the flush_rewrite_rules() function in versions up to, and including, 4.23.1 and . 4.24.0.1.24.0 respectively. This makes it possible for unauthenticated attackers to flush rewrite rules.