CVE-2026-13332

The Masteriyo LMS WordPress plugin versions prior to 2.3.1 is vulnerable to an unauthenticated arbitrary user session termination (Denial of Service). The root cause is an improper authorization check on an unauthenticated AJAX action designed to clear user sessions. This flaw allows an unauthent...