CVE-2026-13332

The Masteriyo LMS WordPress plugin, in versions before 2.3.1 , is vulnerable to an unauthenticated arbitrary user session termination (Denial of Service). The root cause is a failure to properly verify authorization on an unauthenticated AJAX action intended to clear user sessions. This allows un...