229 matches found
Masteriyo LMS <= 1.7.2 - Unauthenticated Privilege Escalation
The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the updateloggedinuser function in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers t...
CVE-2026-82847
The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting it back in the course editor, allowing users with the instructor role to perform Stored Cross-Site Scripting attacks against higher privileged users such as administrators...
CVE-2026-82851
The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a user requests for download, allowing users with the instructor role to retrieve the full content and metadata of arbitrary posts, including other instructors' private and draft...
CVE-2026-82845
The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minimal account to inject arbitrary PHP objects and, by way of a class shipped in a library bundled with the Masteriyo LMS...
EUVD-2026-76789
The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a user requests for download, allowing users with the instructor role to retrieve the full content and metadata of arbitrary posts, including other instructors' private and draft...
CVE-2026-82851 Masteriyo LMS 1.14.0 - 3.4.0 - Instructor+ Arbitrary Post Disclosure via IDOR
The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a user requests for download, allowing users with the instructor role to retrieve the full content and metadata of arbitrary posts, including other instructors' private and draft...
EUVD-2026-76788
The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting it back in the course editor, allowing users with the instructor role to perform Stored Cross-Site Scripting attacks against higher privileged users such as administrators...
CVE-2026-82847
CVE-2026-82847 affects the Masteriyo LMS WordPress plugin in versions prior to 3.4.1 . The vulnerability is a Stored Cross-Site Scripting (XSS) in the Course Highlights field, which is not sanitised or escaped before being output in the course editor. This allows users with the instructor role to...
CVE-2026-82851
The Masteriyo LMS WordPress plugin (versions 1.14.0 through 3.4.0 ) contains an Insecure Direct Object Reference (IDOR) flaw in its download endpoint. The plugin fails to verify ownership of, or restrict the type of, records a user requests for download. As a result, any user with the instructor ...
CVE-2026-82847 Masteriyo LMS < 3.4.1 - Instructor+ Stored XSS via Course Highlights
The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting it back in the course editor, allowing users with the instructor role to perform Stored Cross-Site Scripting attacks against higher privileged users such as administrators...
CVE-2026-82845
Masteriyo LMS WordPress plugin before 3.4.1 is vulnerable to PHP object injection caused by unsanitized deserialization of user-supplied metadata values. Users with a Subscriber+ account can inject arbitrary PHP objects that, via a bundled library class, enable arbitrary code execution on the ser...
CVE-2026-82845 Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection
The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minimal account to inject arbitrary PHP objects and, by way of a class shipped in a library bundled with the Masteriyo LMS...
EUVD-2026-76787
The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minimal account to inject arbitrary PHP objects and, by way of a class shipped in a library bundled with the Masteriyo LMS...
PT-2026-90570
The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minimal account to inject arbitrary PHP objects and, by way of a class shipped in a library bundled with the Masteriyo LMS...
CVE-2026-62132
Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...
CVE-2026-62107
Unauthenticated PHP Object Injection in Masteriyo - LMS = 3.4.0 versions...
CVE-2026-62132
CVE-2026-62132 is a Broken Access Control vulnerability affecting the Masteriyo – LMS WordPress plugin in versions ≤ 3.4.0 . The flaw allows users with the Subscriber role to bypass access controls, resulting in a low integrity impact (CVSS 3.1 score: 5.3 MEDIUM ). The vulnerability was discovere...
EUVD-2026-76205
Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...