Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:52:44 +0000 EUVD-2026-365735 https://cve.radiocsirt.org/vuln/euvd-2026-365735 EUVD-2026-365735 https://cve.radiocsirt.org/vuln/euvd-2026-365735 fkie_cve-2026-82848 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82848 <p>The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated users to read any learner&#39;s enrolment status, timestamps and course-progress data by walking sequential record identifiers. A related gap lets any enrolled user retrieve other learners&#39; enrolment records as well.</p> <p>The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated users to read any learner&#39;s enrolment status, timestamps and course-progress data by walking sequential record identifiers. A related gap lets any enrolled user retrieve other learners&#39; enrolment records as well.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-82848 GHSA-3fc3-m3vj-c335 https://cve.radiocsirt.org/vuln/ghsa-3fc3-m3vj-c335 <p>The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated users to read any learner&#39;s enrolment status, timestamps and course-progress data by walking sequential record identifiers. A related gap lets any enrolled user retrieve other learners&#39; enrolment records as well.</p> <p>The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated users to read any learner&#39;s enrolment status, timestamps and course-progress data by walking sequential record identifiers. A related gap lets any enrolled user retrieve other learners&#39; enrolment records as well.</p> https://cve.radiocsirt.org/vuln/ghsa-3fc3-m3vj-c335