Access violation vulnerability in Masteriyo LMS – eLearning and Online Course Builder for WordPress 1.7.3

The Masteriyo LMS plugin for WordPress, which helps create online courses, is not secure. This is because it does not properly check for a user’s key when using the REST API. As a result, hackers who are not logged in can see the progress of other users’ courses.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.