| CVE-2026-82849 |
The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the…
|
4.3
Moyenne
|
24 sept. 2026 |
| CVE-2026-82850 |
The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any…
|
4.3
Moyenne
|
24 sept. 2026 |
| CVE-2026-82851 |
The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a…
|
2.7
Faible
|
12 sept. 2026 |
| CVE-2026-82847 |
The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting…
|
6.8
Moyenne
|
12 sept. 2026 |
| CVE-2026-82845 |
The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being…
|
9.9
Critique
|
12 sept. 2026 |
| CVE-2026-82848 |
The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course…
|
5.3
Moyenne
|
9 sept. 2026 |
| CVE-2026-82846 |
The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting…
|
6.8
Moyenne
|
5 sept. 2026 |
| CVE-2026-19712 |
The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back…
|
6.1
Moyenne
|
16 août 2026 |
| CVE-2026-13332 |
The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX…
|
9.1
Critique
|
27 juil. 2026 |
| CVE-2026-10824 |
The Masteriyo LMS WordPress plugin before 2.2.1 does not perform authorization checks in a course-progress REST API…
|
6.5
Moyenne
|
25 juin 2026 |