Beveiligingsadvies

CVE-2026-10824

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-25 06:00:01

Laatst bijgewerkt 2026-06-25 13:05:28

Toegewezen door WPScan

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The Masteriyo LMS WordPress plugin before 2.2.1 does not perform authorization checks in a course-progress REST API controller, allowing unauthenticated users to read and permanently delete any user's course-progress records.

← Alle CVE's bekijken Bekijk op cve.org ↗