CVE-2023-3345
Assigner: WPScan
Published: 2023-07-31T09:37:36.423Z
State: PUBLISHED
title: LMS by Masteriyo < 1.6.8 - Information Exposure
problemTypes: descriptions: description: CWE-200 Information Exposure
type: CWE
affected: vendor: Unknown
product: LMS by Masteriyo
versions: status: affected
versionType: custom
version: 0
lessThan: 1.6.8
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The LMS by Masteriyo WordPress plugin before 1.6.8 does not properly safeguards sensitive user information, like other user's email addresses, making it possible for any students to leak them via some of the plugin's REST API endpoints.
credits: value: Yassir Sbai Fahim
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator