CVE-2023-3345

LMS by Masteriyo < 1.6.8 - Information Exposure

published July 31, 2023

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01970 · 80.2th percentile
Published
2023-07-31T09:37Z
EPSS history
Timeline
  • 31 JUL 09:37Z
    LMS by Masteriyo < 1.6.8 - Information Exposure
    cvelistv5