PT-2026-64837 · Undefined · Undefined

Nakata Christian · CVE-2026-13332 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX action used to clear user sessions, allowing unauthenticated attackers to terminate the active sessions (force-logout) of any user on the site, including administrators.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2026-13332

Produtos afetados

Undefined

Referências · 2

• 🔥 https://wpscan.com/vulnerability/f987c823-f215-48f6-86fe-8d898f2c2d94 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-13332 · Nota de Segurança