CVE-2024-43159: WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability

Q: What is the severity of CVE-2024-43159?

CVE-2024-43159 is classified as a Missing Authorization vulnerability that allows access to functionality not properly constrained by access control lists.

Q: How do I fix CVE-2024-43159?

To fix CVE-2024-43159, upgrade Masteriyo - LMS or the WordPress Masteriyo LMS plugin to version 1.11.7 or later.

Q: What versions are affected by CVE-2024-43159?

CVE-2024-43159 affects Masteriyo - LMS and WordPress Masteriyo LMS plugin versions up to and including 1.11.6.

Q: What systems are impacted by CVE-2024-43159?

CVE-2024-43159 impacts systems running Masteriyo - LMS and the WordPress Masteriyo LMS plugin prior to version 1.11.7.

Q: What are the risks associated with CVE-2024-43159?

The risks associated with CVE-2024-43159 include unauthorized access to sensitive functionalities and potential data exposure.

Published Nov 1, 2024

Updated

Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.

Affected Software

3 affected components

masteriyo Masteriyo - LMS<=1.11.6

WordPress Masteriyo LMS plugin<=1.11.6

masteriyo Masteriyo WordPress<1.12.0

Remediation

Information

Update to 1.12.0 or a higher version.

Event History

Nov 1, 2024

CVE Published

via MITRE·02:17 PM

Data Sourced

via MITRE·02:17 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-43159?

CVE-2024-43159 is classified as a Missing Authorization vulnerability that allows access to functionality not properly constrained by access control lists.

How do I fix CVE-2024-43159?

To fix CVE-2024-43159, upgrade Masteriyo - LMS or the WordPress Masteriyo LMS plugin to version 1.11.7 or later.

What versions are affected by CVE-2024-43159?