CVE-2026-65463

Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.

Score

CVSS 3.1 5.4 Medium

Status

Deferred - audit@patchstack.com

Published

2026-07-23

Last modified

2026-10-24

Weaknesses

CWE-639

Affected products

• Masteriyo - Lms (Masteriyo)

References

• https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugi…