6.5Media
WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability
masteriyo Masteriyo - LMS
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.
Vulnerabilidades de masteriyo (CVE)
Registros CVE publicados para masteriyo, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
5.3Media
WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability
masteriyo Masteriyo - LMS
Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.
8.8Alta
WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability
masteriyo Masteriyo - LMS
Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.
5.3Media
Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion
masteriyo Masteriyo LMS – LMS Course Builder, Quizzes & Certificates
The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'delete_item_permissions_check' function in the CourseProgressItemsController in all versions up to, and including, 2.2.0. This makes i…
5.4Media
WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability
masteriyo Masteriyo - LMS
Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.
6.5Media
WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
masteriyo Masteriyo - LMS
Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.
4.3Media
Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification
masteriyo Masteriyo LMS – LMS Course Builder, Quizzes & Certificates
The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.2.1. This is due to the plugin not properly verifying that a user is authorized to perform an act…
5.3Media
Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint
masteriyo Masteriyo LMS – Online Course Builder for eLearning, LMS & Education
The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in versions up to and including 2.1.7. This is due to insufficient webhook signature verification i…
8.8Alta
Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator
masteriyo Masteriyo LMS – Online Course Builder for eLearning, LMS & Education
The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a user to update the user role through the 'InstructorsController::prepare_object_for_database' functi…
6.5Media
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability
masteriyo Masteriyo - LMS
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo - LMS: from n/a through <= 2.0.3.
6.5Media
WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability
masteriyo Masteriyo - LMS
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Stored XSS.This issue affects Masteriyo - LMS: from n/a through <= 1.18.3.
5.3Media
WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability
masteriyo Masteriyo - LMS
Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.3.
7.5Alta
WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability
masteriyo Masteriyo - LMS; masteriyo masteriyo
Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.
5.3Media
WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability
masteriyo Masteriyo - LMS; masteriyo masteriyo
Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.
6.4Media
Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality
masteriyo Masteriyo LMS – Online Course Builder for eLearning, LMS & Education
The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the question's content parameter in all versions up to, and including, 1.13.3 due to insufficient input sanitization an…
8.8Alta
Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation
masteriyo Masteriyo LMS – Online Course Builder for eLearning, LMS & Education; masteriyo masteriyo
The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missing authorization checks on the /wp-json/masteriyo/v1/users/$id REST API endpoint in all versions up …
4.3Media
WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability
masteriyo Masteriyo - LMS
Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.
9.8Crítica
WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability
masteriyo Masteriyo - LMS; masteriyo masteriyo
Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2.
2.1%EPSS