Skip to main content

Masteriyo LMS CVE-2026-82848

| EUVDEUVD-2026-74712 MEDIUM
Missing Authorization (CWE-862)
2026-09-09 WPScan GHSA-3fc3-m3vj-c335
WordPress Information Disclosure Masteriyo Lms
5.3
CVSS 3.1 · Vendor: WPScan
Share

Severity by source

Vendor (WPScan) PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
vuln.today AI
5.3 MEDIUM

REST API is network-reachable with no auth required; only enrollment metadata exposed so C:L; no write or availability impact exists.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

5
Metadata Corrected
Sep 09, 2026 - 16:40 vuln.today
tag: Authentication Bypass replaced by Information Disclosure
Analysis Generated
Sep 09, 2026 - 16:35 vuln.today
Patch available
Sep 09, 2026 - 07:03 EUVD
CVE Published
Sep 09, 2026 - 06:00 cve.org
UNKNOWN (no severity yet)
CVE Published
Sep 09, 2026 - 06:00 cve.org
MEDIUM 5.3

DescriptionCVE.org

The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated users to read any learner's enrolment status, timestamps and course-progress data by walking sequential record identifiers. A related gap lets any enrolled user retrieve other learners' enrolment records as well.

AnalysisAI

Enrollment record exposure in the Masteriyo LMS WordPress plugin (versions 1.3.1 through below 3.4.0) lets unauthenticated attackers retrieve any learner's enrollment status, progress data, and timestamps by iterating sequential integer record identifiers against the plugin's REST API - a classic IDOR pattern with no authorization gate. A secondary gap extends the exposure to authenticated enrolled users, who can similarly read other learners' records without restriction. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Masteriyo LMS plugin version 1.3.1 to below 3.4.0 must be installed and active on a WordPress site. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 5.3 Medium rating with AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N accurately reflects the limited blast radius - exposed data is enrollment metadata (status, timestamps, progress percentages), not credentials or payment records. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Update the Masteriyo LMS WordPress plugin to version 3.4.0 or later, which introduces authorization checks on the REST API enrollment record endpoints. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Masteriyo Lms

View all
CVE-2026-13332 CRITICAL POC
9.1 Jul 27

Unauthenticated arbitrary user session termination (force-logout) in the Masteriyo LMS WordPress plugin before version 2
CVE-2026-82846 MEDIUM POC
6.8 Sep 05

Stored Cross-Site Scripting in the Masteriyo LMS WordPress plugin before version 3.4.0 allows any user holding the cours
CVE-2026-10824 MEDIUM POC
6.5 Jun 25

Unauthenticated access to Masteriyo LMS WordPress plugin's course-progress REST API controller exposes all users' learni
CVE-2026-19712 MEDIUM POC
6.1 Aug 16

Stored Cross-Site Scripting in the Masteriyo LMS WordPress plugin (all versions before 2.3.3) allows instructor-role use
CVE-2026-73996 CRITICAL
9.8 Aug 18

Unauthenticated arbitrary file upload in the Masteriyo LMS WordPress plugin (versions <= 2.3.2) lets remote attackers up
CVE-2026-62107 HIGH
8.8 Sep 11

PHP Object Injection in the Masteriyo LMS WordPress plugin (versions <= 3.4.0) allows remote attackers to inject a craft
CVE-2026-49111 HIGH
8.8 Jun 15

Privilege escalation in the ThemeGrill Masteriyo LMS WordPress plugin (versions up to and including 2.2.0) allows authen
CVE-2026-39524 HIGH
7.5 Jun 15

Broken access control in the Masteriyo - LMS WordPress plugin (versions up to and including 2.1.5) allows remote unauthe
CVE-2026-59513 MEDIUM
6.5 Jul 23

Stored Cross-Site Scripting in Masteriyo LMS WordPress plugin versions up to and including 2.3.0 allows authenticated su
CVE-2026-42743 MEDIUM
6.5 Jun 15

Unauthenticated broken authentication in the Masteriyo LMS WordPress plugin (versions ≤2.1.8) stems from improper JWT si
CVE-2026-65463 MEDIUM
5.4 Jul 23

Insecure Direct Object Reference in the Masteriyo LMS WordPress plugin (versions ≤ 2.3.1) allows authenticated subscribe
CVE-2026-62132 MEDIUM
5.3 Sep 11

Broken access control in the Masteriyo LMS WordPress plugin through version 3.4.0 allows attackers to perform unauthoriz

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2025-20362 HIGH POC
8.6
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2020-36719 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-82848 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy