https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:21:10.065206+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282629 EUVD-2026-282629 2026-10-06T21:21:10.113716+00:00 EUVD-2026-282629 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4484 fkie_cve-2026-4484 2026-10-06T21:21:10.113753+00:00

The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a user to update the user role through the 'InstructorsController::prepare_object_for_database' function. This makes it possible for authenticated attackers, with Student-level access and above, to elevate their privileges to that of an administrator.

 https://cve.radiocsirt.org/vuln/ghsa-6m8q-32w5-c768 GHSA-6m8q-32w5-c768 2026-10-06T21:21:10.113788+00:00

The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a user to update the user role through the 'InstructorsController::prepare_object_for_database' function. This makes it possible for authenticated attackers, with Student-level access and above, to elevate their privileges to that of an administrator.