CVE-2026-4484

CVE-2026-4484 Masteriyo LMS = 2.1.6 - Missing Authorization to Authenticated Student+ Privilege Escalation to Administrator 🔴 Vulnerability Overview CVE-2026-4484 — Authenticated Privilege Escalation Student → Administrator Field| Details ---|--- CVE ID| CVE-2026-4484 Severity| HIGH — CVSS v3.1...

CVE-2026-116410

Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...

EUVD-2026-114306

Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...

CVE-2026-116410

The Masteriyo - LMS WordPress plugin (versions

CVE-2026-116410 WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability

Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...

CVE-2026-116410 WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability

Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...

WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability

WordPress Masteriyo - LMS plugin = 3.4.3 - Arbitrary Content Deletion vulnerability discovered by Sakri Koskimies Saggre in WordPress Plugin Masteriyo - LMS versions = 3.4.3...

learning-management-system

learning-management-system Masteriyo - LMS for WordPress = 1.6.7 - Sensitive Information Exposure Plugin Info Software Type Plugin Software Slug learning-management-system view on wordpress.org Patched? Yes Remediation Update to version 1.6.8, or a newer patched version Affected Version 1.6.8...

CVE-2026-116410: masteriyo Masteriyo - LMS: Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.

Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...

PT-2026-133756

Name of the Vulnerable Software and Affected Versions Masteriyo - LMS versions prior to 3.4.4 Description An issue allows unauthenticated users to perform arbitrary content deletion. Recommendations Update Masteriyo - LMS to version 3.4.4 or later...

CVE-2026-82849

The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to read another user's learning activity. The ownership check it applies is...

CVE-2026-82850

The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers for any quiz on the site, including quizzes in courses they are not enrolled in. The redaction that hides them is appli...

WordPress Masteriyo LMS plugin < 3.4.2 - Subscriber+ Arbitrary User Course Progress Disclosure vulnerability

Subscriber+ Arbitrary User Course Progress Disclosure vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Masteriyo - LMS versions 3.4.2...

CVE-2026-82849 Masteriyo LMS < 3.4.2 - Subscriber+ Arbitrary User Course Progress Disclosure via IDOR

The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to read another user's learning activity. The ownership check it applies is...

CVE-2026-82850 Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure

The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers for any quiz on the site, including quizzes in courses they are not enrolled in. The redaction that hides them is appli...

CVE-2026-82849

The Masteriyo LMS WordPress plugin, versions prior to 3.4.2 , is vulnerable to an IDOR (Insecure Direct Object Reference) flaw. The plugin fails to verify that the authenticated user owns the course-progress records they are requesting. Specifically, the ownership check is bypassed when the reque...

CVE-2026-82850

The Masteriyo LMS WordPress plugin, prior to version 3.4.2 , fails to restrict access to quiz answer keys. This vulnerability allows any authenticated user , such as a student, to retrieve correct answers for any quiz on the site, even those in courses where they are not enrolled. The root cause ...

EUVD-2026-85799

The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers for any quiz on the site, including quizzes in courses they are not enrolled in. The redaction that hides them is appli...

EUVD-2026-85798

The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to read another user's learning activity. The ownership check it applies is...

WordPress Masteriyo LMS plugin < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure vulnerability

Subscriber+ Quiz Answer Key Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin Masteriyo - LMS versions 3.4.2...