Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Masteriyo LMS 3.4.2 Clear all filters
TI-2026-57154 CVE-2026-82850 · GHSA-9g29-72xr-rc7p

Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure

Priority LOW 19

The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers for any quiz on the site, including quizze…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00171 Published 2026-09-24 Fixed in 3.4.2 CWE-200
TI-2026-57153 CVE-2026-82849 · GHSA-cgmx-54pv-6c9x

Masteriyo LMS < 3.4.2 - Subscriber+ Arbitrary User Course Progress Disclosure via IDOR

Priority LOW 19

The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00157 Published 2026-09-24 Fixed in 3.4.2 CWE-639