Masteriyo Learning Management System Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in the Masteriyo Learning Management System (LMS) plugin for WordPress, affecting versions through 1.7.3. This vulnerability allows unauthorized access to course progress, potentially enabling attackers to manipulate course data or access restricted features.

Impact

Exploitation of this vulnerability allows unauthorized users to access and modify course progress information, which could be used to gain unfair advantages in course completion or assessment.

Remediation

Users of the Masteriyo LMS WordPress plugin should update to version 1.7.4 or later. Patchstack users can enable auto-update for vulnerable plugins.