The plugin does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers
https://example.com/wp-json/wp/v2/sensei-messages/<numericID>
Veshraj Ghimire
Veshraj Ghimire
Yes
2022-08-04 (about 10 months ago)
2022-08-04 (about 10 months ago)
2023-04-12 (about 1 months ago)