CVE-2026-85570

The Tutor LMS WordPress plugin, in versions before 4.2.0 , contains a vulnerability where correct answers to quiz questions are included in the page served to students. This occurs regardless of the setting intended to control whether answers are revealed, allowing any enrolled student to obtain ...

CVE-2026-82850 Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure

The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers for any quiz on the site, including quizzes in courses they are not enrolled in. The redaction that hides them is appli...