CVE-2026-13332

The Masteriyo LMS WordPress plugin is affected up to version 2.3.1. An unauthenticated AJAX action used to clear user sessions lacks proper authorization checks, allowing an attacker to terminate active sessions (force-logout) for any user, including administrators. This is a denial of service ri...