2.2.3 - 2026-11-11

• SECURITY: Lessons now follow their course's membership restriction, so non-members can no longer view lessons in restricted courses on the single lesson page, through the REST API or in RSS feeds, or mark them complete. Admins without the course's level now see the no-access message on these lessons, as for any restricted post. #167 (@dparker1005)
• SECURITY: Restricted Tutor LMS lessons, topics and quizzes in public courses are no longer shown to non-members through Tutor LMS's lesson content AJAX request or REST API. #168 (@dparker1005)
• SECURITY: Restricted Sensei LMS lessons are no longer shown to non-members through the REST API or RSS feeds. #168 (@dparker1005)
• SECURITY: Non-members can no longer enroll themselves in restricted Tutor LMS or Sensei LMS courses. #168 (@dparker1005)