292 matches found
CVE-2026-119553
A flaw was found in Moodle. An authenticated user with question import or lesson editing permissions can access sensitive server files, resulting in unauthorized information disclosure. By uploading a specially crafted archive file containing path traversal sequences in image source paths during ...
ExploreRepair: Evidence-Specialized Agents for Vulnerability Repair under Information Constraints
Automated vulnerability repair must often operate with incomplete vulnerability information: developers may lack an accurate vulnerability classification or a provided proof-of-vulnerability PoV test, yet still need to produce a repair. Without detailed information, a key challenge is to explore...
CVE-2026-111369
Versions of ClassroomIO through 1.0.0 are affected by an incorrect authorization vulnerability (CWE-863) within the PUT and DELETE /:lessonId routes. The root cause allows any authenticated course member, including students , to bypass intended restrictions by supplying arbitrary lesson IDs. This...
CVE-2026-104723
The LifterLMS WordPress plugin (versions
CVE-2026-104723 LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above, ...
CVE-2026-104723 LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above, ...
CVE-2026-104915
The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible fo...
CVE-2026-104915: Missing Authorization
The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible fo...
CVE-2026-104049 Academy LMS < 4.0.0 - Subscriber+ Arbitrary Lesson Content Disclosure via Topic REST Endpoint
The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing users with a self-registerable student account to read the full content of arbitrary lessons, including lessons of pai...
CVE-2026-104049: Authorization Bypass Through User-Controlled Key
The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing users with a self-registerable student account to read the full content of arbitrary lessons, including lessons of pai...
PT-2026-107399
The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing users with a self-registerable student account to read the full content of arbitrary lessons, including lessons of pai...
CVE-2026-88847 MasterStudy LMS < 3.7.50 - Subscriber+ Lesson Completion Record Creation
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to...
CVE-2026-88847 MasterStudy LMS < 3.7.50 - Subscriber+ Lesson Completion Record Creation
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to...
CVE-2026-88847
The MasterStudy LMS WordPress Plugin (versions before 3.7.50 ) is vulnerable to an authentication bypass flaw where it fails to verify if a user is enrolled in a course before recording lesson completions. This allows any authenticated user , such as a subscriber, to create unauthorized course pr...
WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.50 - Subscriber+ Lesson Completion Record Creation vulnerability
Subscriber+ Lesson Completion Record Creation vulnerability discovered by Arman Kumar in WordPress Plugin MasterStudy LMS versions 3.7.50...
WordPress MasterStudy LMS WordPress Plugin plugin 2.3.0-3.7.49 - Subscriber+ Course and Lesson Creation vulnerability
Subscriber+ Course and Lesson Creation vulnerability discovered by vuxvinh in WordPress Plugin MasterStudy LMS versions 2.3.0-3.7.49...
CVE-2026-88845 MasterStudy LMS 2.3.0 - < 3.7.50 - Subscriber+ Course and Lesson Creation via Demo Import
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own accoun...
PT-2026-95740
Name of the Vulnerable Software and Affected Versions Tutor LMS versions prior to 4.0.9 Description The Tutor LMS plugin for WordPress contains an authorization bypass that allows authenticated users with subscriber-level access or higher to permanently delete arbitrary WordPress posts, such as...
