CVE-2026-13332
Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX action used to clear user sessions, allowing unauthenticated attackers to terminate the active sessions (force-logout) of any user on the site, including administrators.
| Vendor | unknown |
| Product | masteriyo lms |
| Published | Jul 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown masteriyo lms
Be the first to know when new unknown vulnerabilities affecting unknown masteriyo lms are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Masteriyo LMS
0 < 2.3.1
References
Credits
Nakata Christian WPScan