← Back to Dashboard

CVE-2026-10824

MEDIUM NVD
CVSS Score
6.5
Severity
MEDIUM
Source
NVD
Published
Jun 25, 2026
Description

The Masteriyo LMS WordPress plugin before 2.2.1 does not perform authorization checks in a course-progress REST API controller, allowing unauthenticated users to read and permanently delete any user's course-progress records.

View Full Details ← Back