| CVE-2026-82849 |
The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the…
|
4.3
Medium
|
Sep 24, 2026 |
| CVE-2026-82850 |
The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any…
|
4.3
Medium
|
Sep 24, 2026 |
| CVE-2026-82851 |
The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a…
|
2.7
Low
|
Sep 12, 2026 |
| CVE-2026-82847 |
The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting…
|
6.8
Medium
|
Sep 12, 2026 |
| CVE-2026-82845 |
The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being…
|
9.9
Critical
|
Sep 12, 2026 |
| CVE-2026-82848 |
The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course…
|
5.3
Medium
|
Sep 9, 2026 |
| CVE-2026-82846 |
The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting…
|
6.8
Medium
|
Sep 5, 2026 |
| CVE-2026-19712 |
The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back…
|
6.1
Medium
|
Aug 16, 2026 |
| CVE-2026-13332 |
The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX…
|
9.1
Critical
|
Jul 27, 2026 |
| CVE-2026-10824 |
The Masteriyo LMS WordPress plugin before 2.2.1 does not perform authorization checks in a course-progress REST API…
|
6.5
Medium
|
Jun 25, 2026 |