← CVE Intelligence

CVE-2023-3345

LMS by Masteriyo < 1.6.8 - Information Exposure PUBLISHED

Description (CNA)

The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students

Affected (CNA)

Vendor / productVersions
Unknown / LMS by Masteriyoaffected 0 before 1.6.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.