Lucene search
WpvulndbWPVDB-ID:57C0054A-B713-4F7C-8E41-C009B07624A6HistoryMay 07, 2024 - 12:00 a.m.
Masteriyo - LMS < 1.7.4 - Insecure Direct Object Reference
2024-05-0700:00:00
wpscan.com
4
masteriyo lms
plugin
insecure
direct object reference
rest api
vulnerability
wordpress
Description The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.7.3 via the REST API due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view other users course progress.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.7.4 |
Related
wordfence
wordfence
6.5 Medium
AI Score
Confidence
High
0 Low
EPSS
Percentile
0.0%
Related for WPVDB-ID:57C0054A-B713-4F7C-8E41-C009B07624A6