Vulnerabilities

TI-2024-28829 CVE-2024-43158 · GHSA-h8w4-623w-34f7

WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2024-11-01 No fix listed CWE-862

TI-2024-28830 CVE-2024-43159 · GHSA-f6j4-p58v-f3qw

WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0042 Published 2024-11-01 No fix listed CWE-862

TI-2024-09280 CVE-2024-10000 · GHSA-f7gw-gr5r-rr7w

Cross-site scripting in Masteriyo LMS – Online Course Builder for eLearning, LMS &…

LOW 28

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the question's content parameter in all versions up to, and including, 1.13.3 du…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0028 Published 2024-10-29 No fix listed CWE-79

TI-2024-09288 CVE-2024-10008 · GHSA-x599-839j-7f7f

Missing authorization in Masteriyo LMS – Online Course Builder for eLearning, LMS &…

MEDIUM 41

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missing authorization checks on the /wp-json/masteriyo/v1/users/$i…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00631 Published 2024-10-29 No fix listed CWE-862

TI-2024-28892 CVE-2024-43239 · GHSA-2439-66f5-gjjr

WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability

LOW 35

Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00292 Published 2024-08-18 No fix listed CWE-639