CVE-2026-82849

The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to read another user's learning activity. The ownership check it applies is...

EUVD-2026-85798

The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to read another user's learning activity. The ownership check it applies is...

LAMS Cross-Site Scripting Vulnerability

LAMS is an open source learning activity management system. The system is used to design, manage and deliver online collaborative learning activities. A cross-site scripting vulnerability exists in LAMS versions prior to 3.1. A remote attacker can exploit the vulnerability by manipulating...