Lucene search
+L

3 matches found

NVD
NVD
•added 2026/09/07 1:20 p.m.•8 views

CVE-2026-8279

The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'deleteitempermissionscheck' function in the CourseProgressItemsController in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers ...

5.3CVSS0.00403EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•1 views

CVE-2026-8279: Missing Authorization

The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'deleteitempermissionscheck' function in the CourseProgressItemsController in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers ...

5.3CVSS5.8AI score0.00403EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86762

The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'delete item permissions check' function in the CourseProgressItemsController in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attacke...

5.3CVSS5.7AI score0.00403EPSS
SaveExploits0References5
Rows per page
Query Builder