CVE-2023-3345

Summary

CVE-2023-3345 is a vulnerability affecting the Masteriyo Learning Management System (LMS) plugin for WordPress. Prior to version 1.6.8, the plugin fails to securely handle sensitive user information, specifically other users' email addresses. This issue allows students to access and leak this data through certain REST API endpoints, posing a significant privacy risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.