cleantalk
Vulnerabilities and Security Researches

LMS by Masteriyo – WordPress Learning Management System, eLearning Platform, Online Education System & Online Course , d9707c35db1ab0be9227a865ddf0998f4b634bf3

Published on
Jul 03, 2023
Research Description
Masteriyo LMS – Online Course Builder for eLearning, LMS &amp; Education [learning-management-system] < 1.6.8 Masteriyo - LMS for WordPress <= 1.6.7 - Sensitive Information Exposure The Masteriyo - LMS for WordPress plugin is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.6.7 via the 'get_item' REST callback. This can allow authenticated attackers to extract sensitive data including user metadata.
Affected versions
max 1.6.8.
Status
vulnerable