CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-10008

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missing authorization checks on the /wp-json/masteriyo/v1/users/$id REST API endpoint in all versions up to, and including, 1.13.3. This makes it possible for authenticated attackers, with student-level access and above, to modify the roles of arbitrary users. As a result, attackers can escalate their privileges to the Administrator and demote existing administrators to students.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.04

EPSS Ranking 88.0%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2024-10008

Masteriyo » Masteriyo » Version: 1.5.11

cpe:2.3:a:masteriyo:masteriyo:1.5.11
Masteriyo » Masteriyo » Version: 1.5.12

cpe:2.3:a:masteriyo:masteriyo:1.5.12
Masteriyo » Masteriyo » Version: 1.5.13

cpe:2.3:a:masteriyo:masteriyo:1.5.13
Masteriyo » Masteriyo » Version: 1.5.14

cpe:2.3:a:masteriyo:masteriyo:1.5.14
Masteriyo » Masteriyo » Version: 1.5.15

cpe:2.3:a:masteriyo:masteriyo:1.5.15
Masteriyo » Masteriyo » Version: 1.5.16

cpe:2.3:a:masteriyo:masteriyo:1.5.16
Masteriyo » Masteriyo » Version: 1.5.17

cpe:2.3:a:masteriyo:masteriyo:1.5.17
Masteriyo » Masteriyo » Version: 1.5.18

cpe:2.3:a:masteriyo:masteriyo:1.5.18
Masteriyo » Masteriyo » Version: 1.5.19

cpe:2.3:a:masteriyo:masteriyo:1.5.19
Masteriyo » Masteriyo » Version: 1.5.20

cpe:2.3:a:masteriyo:masteriyo:1.5.20
Masteriyo » Masteriyo » Version: 1.5.21

cpe:2.3:a:masteriyo:masteriyo:1.5.21
Masteriyo » Masteriyo » Version: 1.5.22

cpe:2.3:a:masteriyo:masteriyo:1.5.22
Masteriyo » Masteriyo » Version: 1.5.23

cpe:2.3:a:masteriyo:masteriyo:1.5.23
Masteriyo » Masteriyo » Version: 1.5.24

cpe:2.3:a:masteriyo:masteriyo:1.5.24
Masteriyo » Masteriyo » Version: 1.5.25

cpe:2.3:a:masteriyo:masteriyo:1.5.25
Masteriyo » Masteriyo » Version: 1.5.26

cpe:2.3:a:masteriyo:masteriyo:1.5.26
Masteriyo » Masteriyo » Version: 1.5.27

cpe:2.3:a:masteriyo:masteriyo:1.5.27
Masteriyo » Masteriyo » Version: 1.5.28

cpe:2.3:a:masteriyo:masteriyo:1.5.28
Masteriyo » Masteriyo » Version: 1.5.29

cpe:2.3:a:masteriyo:masteriyo:1.5.29
Masteriyo » Masteriyo » Version: 1.5.30

cpe:2.3:a:masteriyo:masteriyo:1.5.30
Masteriyo » Masteriyo » Version: 1.5.31

cpe:2.3:a:masteriyo:masteriyo:1.5.31
Masteriyo » Masteriyo » Version: 1.5.32

cpe:2.3:a:masteriyo:masteriyo:1.5.32
Masteriyo » Masteriyo » Version: 1.5.33

cpe:2.3:a:masteriyo:masteriyo:1.5.33
Masteriyo » Masteriyo » Version: 1.5.34

cpe:2.3:a:masteriyo:masteriyo:1.5.34
Masteriyo » Masteriyo » Version: 1.5.35

cpe:2.3:a:masteriyo:masteriyo:1.5.35
Masteriyo » Masteriyo » Version: 1.5.36

cpe:2.3:a:masteriyo:masteriyo:1.5.36
Masteriyo » Masteriyo » Version: 1.5.37

cpe:2.3:a:masteriyo:masteriyo:1.5.37
Masteriyo » Masteriyo » Version: 1.5.38

cpe:2.3:a:masteriyo:masteriyo:1.5.38
Masteriyo » Masteriyo » Version: 1.5.39

cpe:2.3:a:masteriyo:masteriyo:1.5.39
Masteriyo » Masteriyo » Version: 1.5.40

cpe:2.3:a:masteriyo:masteriyo:1.5.40
Masteriyo » Masteriyo » Version: 1.5.41

cpe:2.3:a:masteriyo:masteriyo:1.5.41
Masteriyo » Masteriyo » Version: 1.5.42

cpe:2.3:a:masteriyo:masteriyo:1.5.42
Masteriyo » Masteriyo » Version: 1.5.43

cpe:2.3:a:masteriyo:masteriyo:1.5.43
Masteriyo » Masteriyo » Version: 1.6.0

cpe:2.3:a:masteriyo:masteriyo:1.6.0
Masteriyo » Masteriyo » Version: 1.6.1

cpe:2.3:a:masteriyo:masteriyo:1.6.1
Masteriyo » Masteriyo » Version: 1.6.10

cpe:2.3:a:masteriyo:masteriyo:1.6.10
Masteriyo » Masteriyo » Version: 1.6.11

cpe:2.3:a:masteriyo:masteriyo:1.6.11
Masteriyo » Masteriyo » Version: 1.6.2

cpe:2.3:a:masteriyo:masteriyo:1.6.2
Masteriyo » Masteriyo » Version: 1.6.3

cpe:2.3:a:masteriyo:masteriyo:1.6.3
Masteriyo » Masteriyo » Version: 1.6.4

cpe:2.3:a:masteriyo:masteriyo:1.6.4
Masteriyo » Masteriyo » Version: 1.6.5

cpe:2.3:a:masteriyo:masteriyo:1.6.5
Masteriyo » Masteriyo » Version: 1.6.6

cpe:2.3:a:masteriyo:masteriyo:1.6.6
Masteriyo » Masteriyo » Version: 1.6.7

cpe:2.3:a:masteriyo:masteriyo:1.6.7
Masteriyo » Masteriyo » Version: 1.6.8

cpe:2.3:a:masteriyo:masteriyo:1.6.8
Masteriyo » Masteriyo » Version: 1.6.9

cpe:2.3:a:masteriyo:masteriyo:1.6.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-10008

Products

Pricing

Contact Us