Lucene search

K
vulnrichmentWPScanVULNRICHMENT:CVE-2023-3345
HistoryJul 31, 2023 - 9:37 a.m.

CVE-2023-3345 LMS by Masteriyo < 1.6.8 - Information Exposure

2023-07-3109:37:36
WPScan
github.com
2
cve-2023-3345
lms
masteriyo
wordpress
plugin
authorization
rest api
email addresses
students

AI Score

6.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students

AI Score

6.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial