Unrated severityNVD Advisory· Published Sep 12, 2026

CVE-2026-82851

Description

The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a user requests for download, allowing users with the instructor role to retrieve the full content and metadata of arbitrary posts, including other instructors' private and draft courses.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Masteriyo Lmsllm-fuzzy
Range: <3.4.1
Package: https://wordpress.org/plugins/masteriyo-lms

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/07664081-72c3-4f7e-9324-e0047b6e6d22/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000